Lucene search
K

267 matches found

OSV
OSV
added 2023/08/31 1:49 a.m.9 views

MAL-2023-7967 Malicious code in @manomano-internal/toolbox-pkg-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5fc7979e3934ed11d3e174bef1c18bbc67bc57dbce890460d07d7ee1e2d60d68 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/08/21 3:12 a.m.2 views

Malicious code in test-dr-pkg-001 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d511e9d40183359a36594e6f9c61d50195d8e1686197d6e9aded6ba780e8fda6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/07/28 12:15 a.m.3 views

Malicious code in imposter-pkg-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e5127f46671b090bf9ac113a3ff87f19d522e0ec80dda844332b9625b30ecf1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/07/28 12:15 a.m.2 views

Malicious code in very-bad-transitive-pkg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5a9acc8ba367a82af4fdbd34224c7bd392db0ce1df3885c0b4ff0de151e2baac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSV
OSV
added 2023/07/28 12:15 a.m.6 views

MAL-2023-521 Malicious code in imposter-pkg-poc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0e5127f46671b090bf9ac113a3ff87f19d522e0ec80dda844332b9625b30ecf1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
GithubExploit
GithubExploit
added 2023/05/08 1:53 a.m.503 views

Exploit for Improper Ownership Management in Debian Debian_Linux

CVE-2023-0386...

7.8CVSS8.3AI score0.0788EPSS
Exploits13
Snyk
Snyk
added 2023/03/14 8:19 a.m.0 views

Malicious Package

Overview @sectest456/toxic-pkg-dont-use is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if...

9.8CVSS7.1AI score
Exploits0References3
Photon
Photon
added 2022/12/21 12:0 a.m.65 views

Important Photon OS Security Update - PHSA-2022-3.0-0507

Updates of 'grub2', 'linux-esx', 'linux-secure', 'linux-aws', 'linux-rt', 'pkg-config', 'linux' packages of Photon OS have been released...

8.1CVSS6.6AI score0.06563EPSS
Exploits0
Photon
Photon
added 2022/12/16 12:0 a.m.62 views

Important Photon OS Security Update - PHSA-2022-4.0-0300

Updates of 'sqlite', 'pkg-config' packages of Photon OS have been released...

7.3CVSS6.5AI score0.00457EPSS
Exploits1
Photon
Photon
added 2022/12/16 12:0 a.m.36 views

Critical Photon OS Security Update - PHSA-2022-0300

Updates of 'pkg-config', 'sqlite' packages of Photon OS have been released...

1.6AI score0.00531EPSS
Exploits2
Snyk
Snyk
added 2022/10/11 8:18 a.m.0 views

Malicious Package

Overview fixture-pure-esm-pkg is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

9.8CVSS7.1AI score
Exploits0References3
Snyk
Snyk
added 2022/08/19 8:11 a.m.0 views

Malicious Package

Overview @ramanmg03/web-pkg is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this packag...

9.8CVSS7.1AI score
Exploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/08/19 3:55 a.m.1 views

Malicious code in reax3-pkg-uyp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b2d9d0734f5e68965fb90e95c848c40a2a434ad677bc737ad543c7e5b2b356a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSV
OSV
added 2022/08/19 3:55 a.m.5 views

MAL-2022-5711 Malicious code in reax3-pkg-uyp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5b2d9d0734f5e68965fb90e95c848c40a2a434ad677bc737ad543c7e5b2b356a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
Snyk
Snyk
added 2022/08/11 11:43 a.m.3 views

Malicious Package

Overview simple-project-pkg-b is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

9.8CVSS7.1AI score
Exploits0References3
Oracle linux
Oracle linux
added 2022/08/05 12:0 a.m.69 views

virt:ol and virt-devel:ol security, bug fix, and enhancement update

libvirt 8.0.0-5.2.0.1 - Set SOURCEDATEEPOCH from changelog Orabug: 32019554 - Add runtime deps for pkg librbd1 = 1:10.2.5 Keshav Sharma 8.0.0-5.2.el8 - cpumap: Disable cpu64-rhel for host-model and baseline rhbz2084030 - cputest: Drop some old artificial baseline tests rhbz2084030 - cputest: Give...

8.2CVSS0.4AI score0.02701EPSS
Exploits2
OpenVAS
OpenVAS
added 2022/07/18 12:0 a.m.16 views

Fedora: Security Advisory for golang-github-pkg-diff (FEDORA-2022-3969b64d4b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.3CVSS8.9AI score0.05994EPSS
Exploits4References2
OpenVAS
OpenVAS
added 2022/07/06 12:0 a.m.12 views

Fedora: Security Advisory for golang-github-pkg-diff (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.3CVSS8.9AI score0.05994EPSS
Exploits4References2
Fedora
Fedora
added 2022/07/04 1:35 a.m.20 views

[SECURITY] Fedora 36 Update: golang-github-pkg-diff-0-0.4.20210406git20ebb0f.fc36

Module github.com/pkg/diff can be used to create, modify, and print diffs. The top level package, diff, contains convenience functions for the most comm on uses. The subpackages provide very fine-grained control over every aspect: - myers: creates diffs using the Myers diff algorithm. - edit:...

9.3CVSS8.7AI score0.05994EPSS
Exploits4
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:24 p.m.4 views

Malicious code in shakt-pkg-ss (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 037b8feaca6fc29f0d42067efc0aa636aac015008505b6bf7e369c436df1fd45 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
Rows per page
Query Builder