3864 matches found
GHSA-7CX5-254X-CGRQ Parse Server allows public `explain` queries which may expose sensitive database performance information and schema details
Impact The MongoDB explain method provides detailed information about query execution plans, including index usage, collection scanning behavior, and performance metrics. Parse Server permits any client to execute explain queries without requiring the master key. This exposes: - Database schema...
PT-2025-46823
Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 18.1 PostgreSQL versions prior to 17.7 PostgreSQL versions prior to 16.11 PostgreSQL versions prior to 15.15 PostgreSQL versions prior to 14.20 PostgreSQL versions prior to 13.23 Description A flaw exists in the...
Vulnerability in core server (CVE-2025-12817)
PostgreSQL CREATE STATISTICS does not check for schema CREATE privilege Missing authorization in PostgreSQL CREATE STATISTICS command allows a table owner to achieve denial of service against other CREATE STATISTICS users by creating in any schema. A later CREATE STATISTICS for the same name, fro...
Siemens SIMATIC S7-1500 Reachable Assertion (CVE-2021-27212)
In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service daemon exit via a short timestamp. This is related to schemainit.c and checkTime. This plugin only works...
BIT-PARSE-2025-64502 Parse Server allows public `explain` queries which may expose sensitive database performance information and schema details
Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. The MongoDB explain method provides detailed information about query execution plans, including index usage, collection scanning behavior, and performance metrics. Prior to version 8.5.0, Parse...
EUVD-2025-112257
Malicious code in jasmine-less-loader-schema-wasat npm...
EUVD-2025-120944
Malicious code in unuk-schema-cross-env-browserify npm...
EUVD-2025-114803
Malicious code in css-loader-kaus-prettier-plugin-markdown-schema npm...
EUVD-2025-116613
Malicious code in apex-yildun-iota-schema npm...
EUVD-2025-111638
Malicious code in lint-winston-schema-passport npm...
EUVD-2025-122221
Malicious code in schema-zenobia-lint-staged-postcss npm...
EUVD-2025-122228
Malicious code in schema-hermes-protractor-figures npm...
EUVD-2025-121347
Malicious code in test-schema-blaze-grunt npm...
EUVD-2025-116345
Malicious code in auth0-schema-nightwatch-hydra npm...
EUVD-2025-113210
Malicious code in gemini-less-loader-schema-foundation npm...
EUVD-2025-116740
Malicious code in altair-radiant-comet-schema npm...
Malicious code in graphql-chai-schema-elara (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a8815d1a4d4f17193b365dff9a9095f12e31e182c8b4d9189ceeeb9f15874d46 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-111266
Malicious code in mensa-eslint-plugin-schema-corvus npm...
Malicious code in babel-pegasus-xml-schema (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1c99cfe63d56d39e7c66715a4797bb30032ba8dd6254bdf514d52cf979e3706c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...