Lucene search
+L

17 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added yesterday7 views

Malicious code in uniswap-sdk-v4 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a9d01efda86c7ce792f8396d425dce51600262660989f438dd13a17068d9df6d The package presents itself as a Uniswap V4 SDK but its WalletClient constructor captures the caller-supplied private key and POSTs it, along with th...

5.5AI score
SaveExploits0References1
AlpineLinux
AlpineLinux
added 2026/07/08 12:7 a.m.10 views

CVE-2026-59996

scp in OpenSSH before 10.4 may place a file in the parent directory of an intended directory when the copy occurs between two remote destinations...

5.4CVSS6AI score0.0025EPSS
SaveExploits0References3
OSV
OSV
added 2026/06/26 4:42 a.m.22 views

MAL-2026-6503 Malicious code in js-price-client-node (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 763a44df6481ee1948ff9fda0b3997a93001acb138b7bbcba1787c3f2f8699f2 On npm install, the package's postinstall script invokes prices in dist/index.js, which resolves the consumer's project root via process.env.INITCWD?...

5.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/05/19 5:11 p.m.13 views

Malicious code in @citely/mcp-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 55faa6dd8d70be846b57b28ce2665a4a6bc1eafa6898f5f4f2cc8b25d96e1358 On startup of the documented entrypoint npx @citely/mcp-server, setupServer unconditionally invokes void runHarvest in dist/index.js. The harvester...

5.8AI score
SaveExploits0References2
AstraLinux
AstraLinux
added 2025/11/01 10:54 a.m.5 views

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: vxlan: Fixed NPD in arp,neighreduce, when using nexthop objects. When the “proxy” option is enabled on a VXLAN device, the device will suppress ARP requests and IPv6 Neighbor Solicitation messages if it is able to reply on behalf...

5.5CVSS6.6AI score0.00135EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2025/09/19 11:23 p.m.16 views

SUSE CVE-2025-39850

In the Linux kernel, the following vulnerability has been resolved: vxlan: Fix NPD in arp,neighreduce when using nexthop objects When the "proxy" option is enabled on a VXLAN device, the device will suppress ARP requests and IPv6 Neighbor Solicitation messages if it is able to reply on behalf of...

5.5CVSS6.3AI score0.00135EPSS
SaveExploits0References21
OSV
OSV
added 2025/09/19 4:15 p.m.1 views

DEBIAN-CVE-2025-39850

In the Linux kernel, the following vulnerability has been resolved: vxlan: Fix NPD in arp,neighreduce when using nexthop objects When the "proxy" option is enabled on a VXLAN device, the device will suppress ARP requests and IPv6 Neighbor Solicitation messages if it is able to reply on behalf of...

5.5CVSS5.5AI score0.00135EPSS
SaveExploits0References1
NVD
NVD
added 2025/09/19 4:15 p.m.8 views

CVE-2025-39850

In the Linux kernel, the following vulnerability has been resolved: vxlan: Fix NPD in arp,neighreduce when using nexthop objects When the "proxy" option is enabled on a VXLAN device, the device will suppress ARP requests and IPv6 Neighbor Solicitation messages if it is able to reply on behalf of...

5.5CVSS0.00135EPSS
SaveExploits0References3
OSV
OSV
added 2025/09/19 4:15 p.m.10 views

AZL-67565 CVE-2025-39850 affecting package kernel 6.6.126.1-1

In the Linux kernel, the following vulnerability has been resolved: vxlan: Fix NPD in arp,neighreduce when using nexthop objects When the "proxy" option is enabled on a VXLAN device, the device will suppress ARP requests and IPv6 Neighbor Solicitation messages if it is able to reply on behalf of...

5.5CVSS5.7AI score0.00135EPSS
SaveExploits0References1
OSV
OSV
added 2025/09/19 4:15 p.m.8 views

AZL-72340 CVE-2025-39850 affecting package kernel 5.15.200.1-1

In the Linux kernel, the following vulnerability has been resolved: vxlan: Fix NPD in arp,neighreduce when using nexthop objects When the "proxy" option is enabled on a VXLAN device, the device will suppress ARP requests and IPv6 Neighbor Solicitation messages if it is able to reply on behalf of...

5.5CVSS5.9AI score0.00135EPSS
SaveExploits0References1
OSV
OSV
added 2025/09/19 4:15 p.m.12 views

UBUNTU-CVE-2025-39850

In the Linux kernel, the following vulnerability has been resolved: vxlan: Fix NPD in arp,neighreduce when using nexthop objects When the "proxy" option is enabled on a VXLAN device, the device will suppress ARP requests and IPv6 Neighbor Solicitation messages if it is able to reply on behalf of...

5.5CVSS5.9AI score0.00135EPSS
SaveExploits0References16
Vulnrichment
Vulnrichment
added 2025/09/19 3:26 p.m.3 views

CVE-2025-39850 vxlan: Fix NPD in {arp,neigh}_reduce() when using nexthop objects

In the Linux kernel, the following vulnerability has been resolved: vxlan: Fix NPD in arp,neighreduce when using nexthop objects When the "proxy" option is enabled on a VXLAN device, the device will suppress ARP requests and IPv6 Neighbor Solicitation messages if it is able to reply on behalf of...

6AI score0.00135EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2025/09/19 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2025-39850

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - vxlan: Fix NPD in arp,neighreduce when using nexthop objects When the proxy option is enabled on a VXLAN device, the device will suppress ARP requests and IPv6...

5.5CVSS6.6AI score0.00135EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2021/01/26 12:0 a.m.8 views

PT-2021-12856 · Apache · Apache Hadoop

Name of the Vulnerable Software and Affected Versions: Apache Hadoop versions 2.0.0-alpha through 2.10.0 Apache Hadoop versions 3.0.0-alpha1 through 3.1.3 Apache Hadoop versions 3.2.0 through 3.2.1 Description: The WebHDFS client in Apache Hadoop might send an SPNEGO authorization header to a...

8.8CVSS8.3AI score0.04403EPSS
SaveExploits0References39
Prion
Prion
added 2006/02/10 11:2 a.m.15 views

Design/Logic Flaw

Orbicule Undercover uses a third-party web server to determine the IP address through which the computer is accessing the Internet, but does not document this third-party disclosure, which leads to a potential privacy leak that might allow transmission of sensitive information to an unintended...

2.6CVSS6.8AI score0.008EPSS
SaveExploits0References1
NVD
NVD
added 2006/02/10 11:2 a.m.18 views

CVE-2006-0641

Orbicule Undercover uses a third-party web server to determine the IP address through which the computer is accessing the Internet, but does not document this third-party disclosure, which leads to a potential privacy leak that might allow transmission of sensitive information to an unintended...

2.6CVSS6.2AI score0.008EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2006/02/10 11:0 a.m.25 views

CVE-2006-0641

Orbicule Undercover uses a third-party web server to determine the IP address through which the computer is accessing the Internet, but does not document this third-party disclosure, which leads to a potential privacy leak that might allow transmission of sensitive information to an unintended...

6.2AI score0.008EPSS
SaveExploits0References1
Rows per page
Query Builder