2214 matches found
Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript
...
Linux Distros Unpatched Vulnerability : CVE-2021-23648
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The package @braintree/sanitize-url before 6.0.0 are vulnerable to Cross-site Scripting XSS due to improper sanitization in sanitizeUrl function. CVE-2021-23648...
Malicious code in retool-security-install-qa (npm)
--- -= Per source details. Do not edit below this line.=-...
Linux Distros Unpatched Vulnerability : CVE-2021-33930
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Buffer overflow vulnerability in function poolinstallablewhatprovides in src/repo.h in libsolv before 0.7.17 allows attackers to cause a Denial of Service...
Fedora: Security Advisory (FEDORA-2025-41a6e9b04d)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Linux Distros Unpatched Vulnerability : CVE-2016-1242
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fileopen in Tryton before 3.2.17, 3.4.x before 3.4.14, 3.6.x before 3.6.12, 3.8.x before 3.8.8, and 4.x before 4.0.4 allows remote authenticated users with...
Debian: Security Advisory (DLA-4278-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
ROS-20250822-09
The vulnerability of the package designed to work with JSON Web Tokens jwt-go is related to incorrect checking of the data when processing data transmitted via m"aud". Exploitation of the vulnerability could allow an attacker, acting remotely, to bypass the authentication process...
Fedora: Security Advisory (FEDORA-2025-33885cfff8)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Linux Distros Unpatched Vulnerability : CVE-2024-23342
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The ecdsa PyPI package is a pure Python implementation of ECC Elliptic Curve Cryptography with support for ECDSA Elliptic Curve Digital Signature Algorithm, EdD...
Linux Distros Unpatched Vulnerability : CVE-2021-32804
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The npm package tar aka node-tar before versions 6.1.1, 5.0.6, 4.4.14, and 3.3.2 has a arbitrary File Creation/Overwrite vulnerability due to insufficient...
Malicious code in redux-starter (npm)
The package redux-starter was found to contain malicious code...
Malicious code in @zalastax/nolb-pine (npm)
The package @zalastax/nolb-pine was found to contain malicious code...
Malicious code in @zalastax/nolb-_od (npm)
The package @zalastax/nolb-od was found to contain malicious code...
MAL-2025-35694 Malicious code in test-mlw2-linns-ceils-movie-hanap (npm)
The package test-mlw2-linns-ceils-movie-hanap was found to contain malicious code...
MAL-2025-12034 Malicious code in @zalastax/nolb-ilx (npm)
The package @zalastax/nolb-ilx was found to contain malicious code...
MAL-2025-13423 Malicious code in @zalastax/nolb-qm_ (npm)
The package @zalastax/nolb-qm was found to contain malicious code...
MAL-2025-12096 Malicious code in @zalastax/nolb-json-e (npm)
The package @zalastax/nolb-json-e was found to contain malicious code...