Lucene search
+L

331 matches found

OSV
OSV
•added 2025/11/10 5:21 p.m.•3 views

MAL-2025-58176 Malicious code in primitive_impala_z3n (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8d0327ceff929cc66434c0f2183d9dfb57afe364fd5ac20188d45fe42a2f4c20 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

6.8AI score
SaveExploits0
NVD
NVD
•added 2025/11/05 5:15 p.m.•17 views

CVE-2025-46424

Dell CloudLink, versions prior to 8.2, contain use of a Cryptographic Primitive with a Risky Implementation vulnerability. A high privileged attacker could potentially exploit this vulnerability leading to Denial of service...

6.7CVSS0.0009EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2025/11/05 4:46 p.m.•8 views

CVE-2025-46424

Dell CloudLink, versions prior to 8.2, contain use of a Cryptographic Primitive with a Risky Implementation vulnerability. A high privileged attacker could potentially exploit this vulnerability leading to Denial of service...

6.7CVSS6.1AI score0.0009EPSS
SaveExploits0References1
EUVD
EUVD
•added 2025/11/05 4:46 p.m.•11 views

EUVD-2025-37879

Dell CloudLink, versions prior to 8.2, contain use of a Cryptographic Primitive with a Risky Implementation vulnerability. A high privileged attacker could potentially exploit this vulnerability leading to Denial of service...

6.7CVSS6AI score0.0009EPSS
SaveExploits0References2
CVE
CVE
•added 2025/11/05 4:46 p.m.•33 views

CVE-2025-46424

Dell CloudLink prior to 8.2 is affected by a cryptographic primitive with a risky implementation that can lead to Denial of Service when exploited by a high-privilege attacker. The issue is documented across multiple sources (Dell CloudLink; CNVD; RH; NVD; CVE listings) and consistently notes the...

6.7CVSS6.1AI score0.0009EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2025/11/05 4:46 p.m.•16 views

CVE-2025-46424

Dell CloudLink, versions prior to 8.2, contain use of a Cryptographic Primitive with a Risky Implementation vulnerability. A high privileged attacker could potentially exploit this vulnerability leading to Denial of service...

6.7CVSS0.0009EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/11/05 12:00 a.m.•2 views

CVE-2025-46424: Use of a Cryptographic Primitive with a Risky Implementation

Dell CloudLink, versions prior to 8.2, contain use of a Cryptographic Primitive with a Risky Implementation vulnerability. A high privileged attacker could potentially exploit this vulnerability leading to Denial of service...

6.7CVSS5.9AI score0.0009EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/10/22 12:00 a.m.•12 views

The vulnerability of the Windows operating system’s Cryptographic Services allows attackers to disclose protected information.

The vulnerability of the Windows Cryptographic Services component is related to the use of a cryptographic primitive with a risky implementation. Exploiting this vulnerability could allow an attacker to disclose the protected information...

7.8CVSS7.2AI score0.00207EPSS
SaveExploits0References2Affected Software14
Snyk
Snyk
•added 2025/10/21 6:04 p.m.•3 views

Use of a Cryptographic Primitive with a Risky Implementation

Overview Affected versions of this package are vulnerable to Use of a Cryptographic Primitive with a Risky Implementation in the handling of precompiles in the BalanceHandler that can cause prevEventsLen to be overwritten. An attacker can compromise the integrity or confidentiality of the system ...

9.3CVSS6.7AI score
SaveExploits0References3
Snyk
Snyk
•added 2025/10/21 6:04 p.m.•1 views

Use of a Cryptographic Primitive with a Risky Implementation

Overview Affected versions of this package are vulnerable to Use of a Cryptographic Primitive with a Risky Implementation in the handling of precompiles in the BalanceHandler that can cause prevEventsLen to be overwritten. An attacker can compromise the integrity or confidentiality of the system ...

9.3CVSS6.7AI score
SaveExploits0References3
Snyk
Snyk
•added 2025/10/21 6:04 p.m.•2 views

Use of a Cryptographic Primitive with a Risky Implementation

Overview Affected versions of this package are vulnerable to Use of a Cryptographic Primitive with a Risky Implementation in the handling of precompiles in the BalanceHandler that can cause prevEventsLen to be overwritten. An attacker can compromise the integrity or confidentiality of the system ...

9.3CVSS6.7AI score
SaveExploits0References3
Snyk
Snyk
•added 2025/10/21 6:04 p.m.•2 views

Use of a Cryptographic Primitive with a Risky Implementation

Overview Affected versions of this package are vulnerable to Use of a Cryptographic Primitive with a Risky Implementation in the handling of precompiles in the BalanceHandler that can cause prevEventsLen to be overwritten. An attacker can compromise the integrity or confidentiality of the system ...

9.3CVSS6.7AI score
SaveExploits0References3
Snyk
Snyk
•added 2025/10/21 6:04 p.m.•7 views

Use of a Cryptographic Primitive with a Risky Implementation

Overview Affected versions of this package are vulnerable to Use of a Cryptographic Primitive with a Risky Implementation in the handling of precompiles in the BalanceHandler that can cause prevEventsLen to be overwritten. An attacker can compromise the integrity or confidentiality of the system ...

9.3CVSS6.7AI score
SaveExploits0References3
Snyk
Snyk
•added 2025/10/21 6:04 p.m.•2 views

Use of a Cryptographic Primitive with a Risky Implementation

Overview Affected versions of this package are vulnerable to Use of a Cryptographic Primitive with a Risky Implementation in the handling of precompiles in the BalanceHandler that can cause prevEventsLen to be overwritten. An attacker can compromise the integrity or confidentiality of the system ...

9.3CVSS6.7AI score
SaveExploits0References3
EUVD
EUVD
•added 2025/10/16 6:30 p.m.•13 views

EUVD-2025-34780

A type confusion vulnerability exists in the handling of the string addition + operation within the QuickJS engine. The code first checks if the left-hand operand is a string. It then attempts to convert the right-hand operand to a primitive value using JSToPrimitiveFree. This conversion can...

7.1CVSS7.4AI score0.00514EPSS
SaveExploits1References3
OSV
OSV
•added 2025/10/16 4:15 p.m.•8 views

DEBIAN-CVE-2025-62494

A type confusion vulnerability exists in the handling of the string addition + operation within the QuickJS engine. The code first checks if the left-hand operand is a string. It then attempts to convert the right-hand operand to a primitive value using JSToPrimitiveFree. This conversion can...

8.8CVSS6.6AI score0.00514EPSS
SaveExploits1References1
OSV
OSV
•added 2025/10/16 4:15 p.m.•8 views

CVE-2025-62494

A type confusion vulnerability exists in the handling of the string addition + operation within the QuickJS engine. The code first checks if the left-hand operand is a string. It then attempts to convert the right-hand operand to a primitive value using JSToPrimitiveFree. This conversion can...

8.8CVSS6.3AI score
SaveExploits0References2
NVD
NVD
•added 2025/10/16 4:15 p.m.•15 views

CVE-2025-62494

A type confusion vulnerability exists in the handling of the string addition + operation within the QuickJS engine. The code first checks if the left-hand operand is a string. It then attempts to convert the right-hand operand to a primitive value using JSToPrimitiveFree. This conversion can...

8.8CVSS0.00514EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2025/10/16 3:51 p.m.•7 views

CVE-2025-62494 Type confusion in string addition in QuickJS

A type confusion vulnerability exists in the handling of the string addition + operation within the QuickJS engine. The code first checks if the left-hand operand is a string. It then attempts to convert the right-hand operand to a primitive value using JSToPrimitiveFree. This conversion can...

7.1CVSS7.5AI score0.00514EPSS
SaveExploits1References2
AlpineLinux
AlpineLinux
•added 2025/10/16 3:51 p.m.•10 views

CVE-2025-62494

A type confusion vulnerability exists in the handling of the string addition + operation within the QuickJS engine. The code first checks if the left-hand operand is a string. It then attempts to convert the right-hand operand to a primitive value using JSToPrimitiveFree. This conversion can...

8.8CVSS7.9AI score0.00514EPSS
SaveExploits1References2
Rows per page
Query Builder