Malicious code in web3-runtime-engine (npm)

--- Credit: OpenSSF source...

MAL-2026-7437 Malicious code in web3-runtime-engine (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in web3-runtime-engine (npm)

--- -= Per source details. Do not edit below this line.=-...

PT-2024-10701

Name of the Vulnerable Software and Affected Versions touch sw49408.c affected versions not specified Description The issue is related to a possible out of bounds write in the sw49408 irq runtime engine debug function of touch sw49408.c due to an incorrect bounds check. This could lead to local...

Adobe Digital Editions < 4.5.5 Multiple Vulnerabilities (APSB17-20)

The version of Adobe Digital Editions installed on the remote Windows host is prior to 4.5.5. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB17-20 advisory. - Adobe Digital Editions versions 4.5.4 and earlier contain an insecure library loading vulnerability. The...

CVE-2024-32673: Improper Validation of Array Index

Improper Validation of Array Index vulnerability in Samsung Open Source Walrus Webassembly runtime engine allows a segmentation fault issue. This issue affects Walrus: before 72c7230f32a0b791355bbdfc78669701024b0956...

Oracle Business Process Management Suite (Jul 2023 CPU)

The version of Oracle Business Process Management Suite installed on the remote host is affected by multiple vulnerabilities, as referenced in the July 2023 CPU advisory, including: - Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware component:...

Xenomorph Android Banking Trojan Returns with a New and More Powerful Variant

A new variant of the Android banking trojan named Xenomorph has surfaced in the wild, latest findings from ThreatFabric reveal. Named "Xenomorph 3rd generation " by the Hadoken Security Group, the threat actor behind the operation, the updated version comes with new features that allow it to...

Mulesoft Mule Unsafe Deserialization

The MuleSoft Mule runtime engine before 3.8.0 allows remote attackers to execute arbitrary code because of Java Deserialization, related to Apache Commons Collections...

Oracle Business Process Management Suite (Apr 2022 CPU)

The version of Oracle Business Process Management Suite installed on the remote host is affected by multiple vulnerabilities, as referenced in the April 2022 CPU advisory. Specifically: - Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware component:...

Oracle Business Process Management Suite (Oct 2020 CPU)

The version of Oracle Business Process Management Suite installed on the remote host is affected by the following vulnerabilities as referenced in the October 2020 CPU advisory: - Vulnerability in the Runtime Engine Application Development Framework. An unauthenticated, remote attacker with netwo...

Deserialization of untrusted data

The MuleSoft Mule Community Edition runtime engine before 3.8 allows remote attackers to execute arbitrary code because of Java Deserialization, related to Apache Commons Collections...

CVE-2019-13116

The MuleSoft Mule Community Edition runtime engine before 3.8 allows remote attackers to execute arbitrary code because of Java Deserialization, related to Apache Commons Collections...

PT-2019-13135

Name of the Vulnerable Software and Affected Versions MuleSoft Mule Community Edition versions prior to 3.8 MuleSoft Mule runtime engine versions prior to 3.8.0 Description The issue allows remote attackers to execute arbitrary code due to Java Deserialization, related to Apache Commons...

CVE-2017-3088

Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the PDF runtime engine. Successful exploitation could lead to arbitrary code execution...

PT-2017-15639

Name of the Vulnerable Software and Affected Versions Adobe Digital Editions versions 4.5.4 and earlier Description The issue is related to a memory corruption vulnerability in the PDF runtime engine. Successful exploitation could lead to arbitrary code execution. Recommendations For Adobe Digita...

CVE-2017-3088: Improper Restriction of Operations within the Bounds of a Memory Buffer

Adobe Digital Editions versions 4.5.4 and earlier have an exploitable memory corruption vulnerability in the PDF runtime engine. Successful exploitation could lead to arbitrary code execution...

PT-2015-7600

Name of the Vulnerable Software and Affected Versions Newphoria applican framework versions prior to 1.13.0 Description A cross-site scripting XSS issue exists in the runtime engine, allowing remote attackers to inject arbitrary web script or HTML via a crafted SSID encountered by an applican...

CVE-2015-7771: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the runtime engine in the Newphoria applican framework before 1.13.0 for Android and iOS allows remote attackers to inject arbitrary web script or HTML via a crafted SSID that is encountered by an applican application, a different vulnerability than...

PT-2015-7601

Name of the Vulnerable Software and Affected Versions Newphoria applican framework versions prior to 1.13.0 Description A cross-site scripting XSS issue exists in the runtime engine of the Newphoria applican framework, allowing remote attackers to inject arbitrary web script or HTML via a crafted...