Lucene search
+L

9 matches found

OSV
OSV
added 2026/07/09 5:53 a.m.6 views

MAL-2026-7028 Malicious code in calvuepro (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 9de2057a076c31ca107db2c3e8d330a7b4aa2d8d67896cecd6c7ebef21d07731 Package ships a 5.7MB prebuilt darwin-arm64 Mach-O at vendor/clavuepro-darwin-arm64 with no source tree, no hash/signature verification, and no...

6.2AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2026/06/23 8:20 p.m.12 views

Malicious code in log-taker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35623f56ea43d8a9a7ac1caa84678ed40d6923fdf19d8d23f7d4aacdde1a8c4a index.js requires childprocess and invokes execSync with bash and zsh shells around lines 315 and 331. The available evidence does not establish what...

5.9AI score
SaveExploits0References2
OSV
OSV
added 2026/06/23 8:20 p.m.7 views

MAL-2026-6338 Malicious code in log-taker (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 35623f56ea43d8a9a7ac1caa84678ed40d6923fdf19d8d23f7d4aacdde1a8c4a index.js requires childprocess and invokes execSync with bash and zsh shells around lines 315 and 331. The available evidence does not establish what...

5.9AI score
SaveExploits0References2
EUVD
EUVD
added 2026/01/13 2:10 p.m.12 views

EUVD-2026-2357

Zohocorp ManageEngine PAM360 versions before 8202; Password Manager Pro versions before 13221; Access Manager Plus versions prior to 4401 are vulnerable to an authorization issue in the initiate remote session functionality...

8.1CVSS6.4AI score0.00723EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/01/06 1:47 a.m.9 views

EUVD-2026-1056

In dpe, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: ALPS10114835; Issue ID: MSV-4479...

6.7CVSS6.4AI score0.00071EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/01/02 6:30 p.m.6 views

EUVD-2026-0462

This CVE ID was rejected because it was reserved but not used for a vulnerability disclosure...

5.5AI score
SaveExploits0References1
EUVD
EUVD
added 2025/12/23 6:30 p.m.3 views

EUVD-2025-204861

This CVE id was assigned but later discarded...

6.1AI score
SaveExploits0References1
OSV
OSV
added 2025/03/31 4:1 p.m.8 views

CGA-5H5V-HVC8-Q5W8

Bulletin has no description...

6.8CVSS7.2AI score0.061EPSS
SaveExploits3
ATTACKERKB
ATTACKERKB
added 2021/11/29 8:15 p.m.2 views

CVE-2021-43783

@backstage/plugin-scaffolder-backend is the backend for the default Backstage software templates. In affected versions a malicious actor with write access to a registered scaffolder template is able to manipulate the template in a way that writes files to arbitrary paths on the scaffolder-backend...

8.5CVSS7.4AI score0.01206EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder