5 matches found
Malicious code in fini-savi-lisa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56fc0fcd63dec56fcc2049ab78238ce9c10765fd9709b1651485efac50ad012f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
MAL-2025-155076 Malicious code in fini-savi-lisa (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 56fc0fcd63dec56fcc2049ab78238ce9c10765fd9709b1651485efac50ad012f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
savi-water.com XSS vulnerability
Open Bug Bounty ID: OBB-630267 Description| Value ---|--- Affected Website:| savi-water.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
CVE-2014-1213
Sophos Anti-Virus engine SAVi before 3.50.1, as used in VDL 4.97G 9.7.x before 9.7.9, 10.0.x before 10.0.11, and 10.3.x before 10.3.1 does not set an ACL for certain global and session objects, which allows local users to bypass anti-virus protection, cause a denial of service resource consumptio...
CVE-2014-1213
CVE-2014-1213 affects Sophos Anti-Virus engine (SAVi) prior to 3.50.1 used in certain VDL/VDL-based builds. The root cause is failure to set ACLs on a set of global and session objects (e.g., DataUpdateRequest, multiple SAV-related mutexes/events such as ReadyForUpdateSAV-*, UpdateComplete, Updat...