Malicious code in fini-savi-lisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56fc0fcd63dec56fcc2049ab78238ce9c10765fd9709b1651485efac50ad012f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-155076 Malicious code in fini-savi-lisa (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56fc0fcd63dec56fcc2049ab78238ce9c10765fd9709b1651485efac50ad012f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

savi-water.com XSS vulnerability

Open Bug Bounty ID: OBB-630267 Description| Value ---|--- Affected Website:| savi-water.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

CVE-2014-1213

Sophos Anti-Virus engine SAVi before 3.50.1, as used in VDL 4.97G 9.7.x before 9.7.9, 10.0.x before 10.0.11, and 10.3.x before 10.3.1 does not set an ACL for certain global and session objects, which allows local users to bypass anti-virus protection, cause a denial of service resource consumptio...

CVE-2014-1213

CVE-2014-1213 affects Sophos Anti-Virus engine (SAVi) prior to 3.50.1 used in certain VDL/VDL-based builds. The root cause is failure to set ACLs on a set of global and session objects (e.g., DataUpdateRequest, multiple SAV-related mutexes/events such as ReadyForUpdateSAV-*, UpdateComplete, Updat...

PT-2014-4017

Name of the Vulnerable Software and Affected Versions Sophos Anti-Virus engine SAVi versions prior to 3.50.1 VDL 4.97G versions prior to 9.7.9 VDL 4.97G versions 10.0.x prior to 10.0.11 VDL 4.97G versions 10.3.x prior to 10.3.1 Description The issue allows local users to bypass anti-virus...

CVE-2014-1213: Undefined Security Weakness

Sophos Anti-Virus engine SAVi before 3.50.1, as used in VDL 4.97G 9.7.x before 9.7.9, 10.0.x before 10.0.11, and 10.3.x before 10.3.1 does not set an ACL for certain global and session objects, which allows local users to bypass anti-virus protection, cause a denial of service resource consumptio...

CVE-2008-3177: Undefined Security Weakness

Sophos virus detection engine 2.75 on Linux and Unix, as used in Sophos Email Appliance, Pure Message for Unix, and Sophos Anti-Virus Interface SAVI, allows remote attackers to cause a denial of service engine crash via zero-length MIME attachments...