Lucene search
K

79 matches found

Snyk
Snyk
added 6 days ago6 views

Malicious Package

Overview power-apps is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorship...

9.8CVSS5.8AI score
Exploits0References2
OSV
OSV
added 2026/05/24 11:5 a.m.7 views

MAL-2026-4274 Malicious code in power-apps (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f68653eed66e7343973bc919788864990337f7645072d32a9d7465d4bf4ff4e7 On npm install, postinstall.js executes whoami, id, and reads os.hostname, os.platform, process.cwd, and CI/GitHub environment variables, then sends...

5.8AI score
Exploits0References3
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/05/24 11:5 a.m.9 views

Malicious code in power-apps (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f68653eed66e7343973bc919788864990337f7645072d32a9d7465d4bf4ff4e7 On npm install, postinstall.js executes whoami, id, and reads os.hostname, os.platform, process.cwd, and CI/GitHub environment variables, then sends...

5.8AI score
Exploits0References3
RedhatCVE
RedhatCVE
added 2026/04/25 7:22 a.m.0 views

CVE-2026-32172

Uncontrolled search path element in Microsoft Power Apps allows an unauthorized attacker to execute code over a network...

8CVSS5.4AI score0.00052EPSS
Exploits0References1
EUVD
EUVD
added 2026/04/24 12:31 a.m.1 views

EUVD-2026-25308

Uncontrolled search path element in Microsoft Power Apps allows an unauthorized attacker to execute code over a network...

8CVSS5.9AI score0.00052EPSS
Exploits0References2
NVD
NVD
added 2026/04/23 10:16 p.m.0 views

CVE-2026-32172

Uncontrolled search path element in Microsoft Power Apps allows an unauthorized attacker to execute code over a network...

8CVSS0.00052EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/04/23 9:37 p.m.0 views

CVE-2026-32172

Uncontrolled search path element in Microsoft Power Apps allows an unauthorized attacker to execute code over a network...

8CVSS5.9AI score0.00052EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/04/23 9:37 p.m.28 views

CVE-2026-32172 Microsoft Power Apps Remote Code Execution Vulnerability

...

8CVSS0.00052EPSS
Exploits0References1
CVE
CVE
added 2026/04/23 9:37 p.m.5 views

CVE-2026-32172

Technical details for CVE-2026-32172 are not publicly available in the provided documents. Monitor for updates.

8CVSS5.9AI score0.00052EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/23 9:37 p.m.0 views

CVE-2026-32172 Microsoft Power Apps Remote Code Execution Vulnerability

...

8CVSS5.1AI score0.00052EPSS
Exploits0References1
Microsoft CVE
Microsoft CVE
added 2026/04/23 2:0 p.m.5 views

Microsoft Power Apps Remote Code Execution Vulnerability

Uncontrolled search path element in Microsoft Power Apps allows an unauthorized attacker to execute code over a network...

8CVSS5.9AI score0.00052EPSS
Exploits0
CNNVD
CNNVD
added 2026/04/23 12:0 a.m.2 views

Microsoft Power Apps 代码问题漏洞

Microsoft Power Apps is a low-code development platform provided by Microsoft Corporation in the United States. It aims to help users easily build custom enterprise-level applications. There are code-related vulnerabilities in Microsoft Power Apps. These vulnerabilities stem from uncontrolled...

8CVSS6AI score0.00052EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/04/23 12:0 a.m.1 views

PT-2026-34758

Name of the Vulnerable Software and Affected Versions Microsoft Power Apps affected versions not specified Description An uncontrolled search path element allows an unauthorized attacker to execute code over a network. Recommendations At the moment, there is no information about a newer version...

8CVSS5.4AI score0.00052EPSS
Exploits0References4
Kaspersky
Kaspersky
added 2026/04/23 12:0 a.m.3 views

KLA91004 Multiple vulnerabilities in Microsoft Dynamics

Multiple vulnerabilities were found in Microsoft Dynamics. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions, spoof user interface. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Microsoft Power Apps...

9.3CVSS6.6AI score0.00052EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2026/04/15 7:23 p.m.0 views

CVE-2026-26149

Improper neutralization of escape, meta, or control sequences in Microsoft Power Apps allows an authorized attacker to perform spoofing over a network...

9CVSS6.2AI score0.00071EPSS
Exploits0References1
EUVD
EUVD
added 2026/04/14 6:30 p.m.0 views

EUVD-2026-22371

Improper neutralization of escape, meta, or control sequences in Microsoft Power Apps allows an authorized attacker to bypass a security feature over a network...

9CVSS5.8AI score0.00071EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/04/14 4:56 p.m.0 views

CVE-2026-26149

Improper neutralization of escape, meta, or control sequences in Microsoft Power Apps allows an authorized attacker to perform spoofing over a network...

9CVSS5.8AI score0.00071EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2026/04/14 4:56 p.m.23 views

CVE-2026-26149 Microsoft Power Apps Desktop Client Spoofing Vulnerability

...

9CVSS0.00071EPSS
Exploits0References1
CVE
CVE
added 2026/04/14 4:56 p.m.6 views

CVE-2026-26149

Technical details about CVE-2026-26149 are not publicly provided in the available documents. Monitor for updates from Microsoft and changelogs to learn affected components, impact, and remediation.

9CVSS5.2AI score0.00071EPSS
Exploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/14 4:56 p.m.0 views

CVE-2026-26149 Microsoft Power Apps Desktop Client Spoofing Vulnerability

...

9CVSS5.1AI score0.00071EPSS
Exploits0References1
Rows per page
Query Builder