Lucene search
K

7 matches found

OSV
OSV
added 2025/11/24 11:28 p.m.1 views

MAL-2025-191317 Malicious code in @silgi/permission (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e79c1aefaf6282e92f02a2de0191e6d673a1750c97c6646e377d29f1006321c9 The package @silgi/permission was found to contain malicious code. Source: ghsa-malware...

6.8AI score
Exploits0References4
Snyk
Snyk
added 2025/11/24 8:33 p.m.2 views

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

9.8CVSS6.8AI score
Exploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/06/13 12:28 a.m.2 views

Malicious code in mi-permission (npm)

The package communicates with a domain associated with malicious activity...

7AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2021/12/03 12:0 a.m.26 views

openSUSE 15 Security Update : permissions (openSUSE-SU-2021:1520-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1520-1 advisory. - The permission package in SUSE Linux Enterprise Server allowed all local users to run dumpcap in the easy permission profile and sniff...

7.1CVSS5.8AI score0.00081EPSS
Exploits0References37
NVD
NVD
added 2020/01/24 9:15 a.m.15 views

CVE-2019-3687

The permission package in SUSE Linux Enterprise Server allowed all local users to run dumpcap in the "easy" permission profile and sniff network traffic. This issue affects: SUSE Linux Enterprise Server permissions versions starting from 85c83fef7e017f8ab7f8602d3163786d57344439 to...

4CVSS3.9AI score0.00081EPSS
Exploits0References2
Cvelist
Cvelist
added 2020/01/24 8:25 a.m.18 views

CVE-2019-3687 "easy" permission profile allows everyone execute dumpcap and read all network traffic

The permission package in SUSE Linux Enterprise Server allowed all local users to run dumpcap in the "easy" permission profile and sniff network traffic. This issue affects: SUSE Linux Enterprise Server permissions versions starting from 85c83fef7e017f8ab7f8602d3163786d57344439 to...

4CVSS4AI score0.00081EPSS
Exploits0References2
CVE
CVE
added 2020/01/24 8:25 a.m.136 views

CVE-2019-3687

CVE-2019-3687 affects the permissions package in SUSE/openSUSE SLE/OpenSUSE, allowing local users to run dumpcap with the easy permission profile and sniff network traffic. Affected range: permissions versions from 85c83fef7e017f8ab7f8602d3163786d57344439 to 081d081dcfaf61710bda34bc21c80c66276119...

4CVSS3.9AI score0.00081EPSS
Exploits0References2Affected Software1
Rows per page
Query Builder