5087 matches found
MAL-2025-189264 Malicious code in rocket-polaris-prettier-schema (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b22e15bc048395a61f688ffa84069166c241328128e1fb0ab74bb9951a999d64 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-176611
Malicious code in rocket-polaris-prettier-schema npm...
Parse Server allows public `explain` queries which may expose sensitive database performance information and schema details
Impact The MongoDB explain method provides detailed information about query execution plans, including index usage, collection scanning behavior, and performance metrics. Parse Server permits any client to execute explain queries without requiring the master key. This exposes: - Database schema...
GHSA-7CX5-254X-CGRQ Parse Server allows public `explain` queries which may expose sensitive database performance information and schema details
Impact The MongoDB explain method provides detailed information about query execution plans, including index usage, collection scanning behavior, and performance metrics. Parse Server permits any client to execute explain queries without requiring the master key. This exposes: - Database schema...
CVE-2025-12817: Missing Authorization
Missing authorization in PostgreSQL CREATE STATISTICS command allows a table owner to achieve denial of service against other CREATE STATISTICS users by creating in any schema. A later CREATE STATISTICS for the same name, from a user having the CREATE privilege, would then fail. Versions before...
Siemens SIMATIC S7-1500 Reachable Assertion (CVE-2021-27212)
In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service daemon exit via a short timestamp. This is related to schemainit.c and checkTime. This plugin only works...
PT-2025-46823
Name of the Vulnerable Software and Affected Versions PostgreSQL versions prior to 18.1 PostgreSQL versions prior to 17.7 PostgreSQL versions prior to 16.11 PostgreSQL versions prior to 15.15 PostgreSQL versions prior to 14.20 PostgreSQL versions prior to 13.23 Description A flaw exists in the...
Vulnerability in core server (CVE-2025-12817)
PostgreSQL CREATE STATISTICS does not check for schema CREATE privilege Missing authorization in PostgreSQL CREATE STATISTICS command allows a table owner to achieve denial of service against other CREATE STATISTICS users by creating in any schema. A later CREATE STATISTICS for the same name, fro...
BIT-PARSE-2025-64502 Parse Server allows public `explain` queries which may expose sensitive database performance information and schema details
Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. The MongoDB explain method provides detailed information about query execution plans, including index usage, collection scanning behavior, and performance metrics. Prior to version 8.5.0, Parse...
EUVD-2025-120355
Malicious code in writable-neptune-norma-schema npm...
EUVD-2025-121076
Malicious code in typeorm-node-sass-karma-schema npm...
EUVD-2025-121046
Malicious code in uglify-js-schema-spica-arcturus npm...
EUVD-2025-120484
Malicious code in weywot-schema-relay-warp npm...
EUVD-2025-121666
Malicious code in standard-schema-ophiuchus-cors npm...
EUVD-2025-121347
Malicious code in test-schema-blaze-grunt npm...
EUVD-2025-121346
Malicious code in test-schema-dione-leda npm...
EUVD-2025-122510
Malicious code in reveal-md-hyperion-websockets-schema npm...
EUVD-2025-122338
Malicious code in sagitta-cache-cressida-schema npm...