Lucene search
+L

116 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2025/04/21 5:19 p.m.13 views

Malicious code in slf4j-api-js (npm)

This package runs a post-install script that exfils sensitive data to a attacker-controlled server. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b3bf0cf1724507eaf1d28ec976793772cc682047cc52a74438224fb96d61884b Any computer that has this package installed or runni...

6.8AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/01/19 1:31 p.m.19 views

Malicious code in next-refresh-token (npm)

This package executes a post-install script to collect system data and sends it to a remote server. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1d44ee35f1e7a2f1a815de12ce539b2c3ffcb9ef5dc72eb632de64e000cf1b7 Any computer that has this package installed or runni...

6.9AI score
SaveExploits0References5
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/01/19 1:27 p.m.30 views

Malicious code in openssl-node (npm)

This package executes a post-install script to collect system data and sends it to a remote server. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06f19e257e800106253b9b27f14e1caac48d65284d85d47aa244d8aa9bfc97a8 Any computer that has this package installed or runni...

6.9AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/01/19 12:48 p.m.19 views

Malicious code in serve-static-corell (npm)

This package includes a post-install script that fetches JavaScript code from a remote server and executes it. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fdac054c93284fd4c0dca285d57baabea075f4c42f7a8bd63abf69f974d56b31 Any computer that has this package install...

7.1AI score
SaveExploits0References5
OSV
OSV
added 2025/01/19 12:48 p.m.24 views

MAL-2025-141 Malicious code in serve-static-corell (npm)

This package includes a post-install script that fetches JavaScript code from a remote server and executes it. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fdac054c93284fd4c0dca285d57baabea075f4c42f7a8bd63abf69f974d56b31 Any computer that has this package install...

7.2AI score
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2024/10/16 12:00 a.m.11 views

PT-2024-12299 · Mlocate · Mlocate

Name of the Vulnerable Software and Affected Versions: mlocate affected versions not specified Description: The issue allows the RUN UPDATEDB AS user to make arbitrary files world readable by abusing insecure file operations that run with root privileges. This is due to mlocate's %post script...

8.5CVSS6.7AI score0.00201EPSS
SaveExploits0References13
RedHat Linux
RedHat Linux
added 2024/06/25 12:22 a.m.47 views

Important: Red Hat Security Advisory: kpatch-patch security update

An update for kpatch-patch is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...

7.8CVSS7.2AI score0.28058EPSS
SaveExploits16References2
RedHat Linux
RedHat Linux
added 2024/06/25 12:21 a.m.34 views

Important: Red Hat Security Advisory: kpatch-patch security update

An update for kpatch-patch is now available for Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, i...

7.8CVSS7.2AI score0.28058EPSS
SaveExploits16References2
RedHat Linux
RedHat Linux
added 2024/04/23 12:31 a.m.50 views

Important: Red Hat Security Advisory: kpatch-patch security update

An update for kpatch-patch is now available for Red Hat Enterprise Linux 8.2 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, i...

7.8CVSS6.8AI score0.00344EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2024/04/02 3:58 p.m.57 views

Important: Red Hat Security Advisory: kpatch-patch security update

An update for kpatch-patch is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

7CVSS6.8AI score0.00767EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2024/03/12 1:04 a.m.53 views

Important: Red Hat Security Advisory: kernel live patch module security update

An update for kpatch-patch-5140-70641, kpatch-patch-5140-70701, kpatch-patch-5140-70751, kpatch-patch-5140-70801, and kpatch-patch-5140-70851 is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of...

10CVSS7.1AI score0.03546EPSS
SaveExploits2References7
RedHat Linux
RedHat Linux
added 2024/02/29 3:51 p.m.61 views

Important: Red Hat Security Advisory: kpatch-patch security update

An update for kpatch-patch is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...

7CVSS6.8AI score0.00767EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2024/01/30 1:13 p.m.41 views

Important: Red Hat Security Advisory: kpatch-patch security update

An update for kpatch-patch is now available for Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, i...

10CVSS7.3AI score0.03546EPSS
SaveExploits3References8
SUSE CVE
SUSE CVE
added 2024/01/26 3:07 a.m.6 views

SUSE CVE-2023-32190

mlocate's %post script allows RUNUPDATEDBAS user to make arbitrary files world readable by abusing insecure file operations that run with root privileges...

8.5CVSS7.2AI score0.00201EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2024/01/15 12:00 a.m.12 views

Gentoo Security Vulnerabilities

Gentoo is an open source Linux system from the Gentoo Foundation. A security vulnerability exists in Gentoo ebuild for Slurm 22.05.3 and earlier versions, which stems from the fact that pkgpostinst can call chown to assign ownership of files in the root filesystem...

9.8CVSS6.8AI score0.00373EPSS
SaveExploits1References2
RedHat Linux
RedHat Linux
added 2023/08/29 9:26 a.m.64 views

Important: Red Hat Security Advisory: kpatch-patch security update

An update for kpatch-patch is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...

7.8CVSS6.8AI score0.00491EPSS
SaveExploits1References2
RedHat Linux
RedHat Linux
added 2023/04/21 8:23 a.m.63 views

Important: Red Hat Security Advisory: kpatch-patch security update

An update for kpatch-patch is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...

7.8CVSS6.8AI score0.00652EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2023/04/05 1:50 p.m.50 views

Important: Red Hat Security Advisory: kpatch-patch security update

An update for kpatch-patch is now available for Red Hat Enterprise Linux 8.6 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...

7.9CVSS7.1AI score0.0788EPSS
SaveExploits14References3
RedHat Linux
RedHat Linux
added 2023/03/27 8:18 a.m.37 views

Important: Red Hat Security Advisory: kpatch-patch security update

An update for kpatch-patch is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...

7.8CVSS6.8AI score0.00459EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
added 2023/03/07 9:56 a.m.36 views

Important: Red Hat Security Advisory: kpatch-patch security update

An update for kpatch-patch is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability...

7.8CVSS6.9AI score0.00431EPSS
SaveExploits0References2
Rows per page
Query Builder