Lucene search
+L

14 matches found

OSV
OSV
•added 2026/07/30 10:36 p.m.•21 views

MAL-2026-11377 Malicious code in scol (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea99a3f3b1743882b257e9f10fe8ce5575c81f7ce1a439fb5a4da12ead9b1e5a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

5.9AI score
SaveExploits0References1
RedhatCVE
RedhatCVE
•added 2026/01/09 12:40 p.m.•17 views

CVE-2023-43298

An issue in SCOL Members Card mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

5.3CVSS6.9AI score0.00508EPSS
SaveExploits1References1
EUVD
EUVD
•added 2025/10/03 8:07 p.m.•20 views

EUVD-2023-47717

Malicious code in bioql PyPI...

5.3CVSS5.7AI score0.00508EPSS
SaveExploits1References1
OSV
OSV
•added 2023/12/07 7:15 a.m.•16 views

CVE-2023-43298

An issue in SCOL Members Card mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

5.3CVSS5.8AI score0.00508EPSS
SaveExploits1References1
NVD
NVD
•added 2023/12/07 7:15 a.m.•36 views

CVE-2023-43298

An issue in SCOL Members Card mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

5.3CVSS0.00508EPSS
SaveExploits1References1
Prion
Prion
•added 2023/12/07 7:15 a.m.•24 views

Design/Logic Flaw

An issue in SCOL Members Card mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

5CVSS7.1AI score0.00508EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
•added 2023/12/07 12:00 a.m.•17 views

Line Security Breach

Line is an instant messaging platform from Line Inc. A security vulnerability exists in Line SCOL Members Card mini-app version v13.6.1, which stems from a vulnerability that allows an attacker to send a crafted malicious notification via a compromised channel access token...

5.3CVSS5.5AI score0.00508EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2023/12/07 12:00 a.m.•43 views

CVE-2023-43298

An issue in SCOL Members Card mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

5.6AI score0.00508EPSS
SaveExploits1References1
CVE
CVE
•added 2023/12/07 12:00 a.m.•79 views

CVE-2023-43298

The CVE affects Line’s SCOL Members Card mini-app on v13.6.1. The root problem is leakage of the channel access token, which enables attackers to send crafted malicious notifications. Affects the mini-app’s ability to authenticate/authorize token usage; impacts confidentiality/integrity per the c...

5.3CVSS5.2AI score0.00508EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/07 12:00 a.m.•7 views

CVE-2023-43298: Undefined Security Weakness

An issue in SCOL Members Card mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

5.3CVSS6AI score0.00508EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2023/12/07 12:00 a.m.•14 views

CVE-2023-43298

An issue in SCOL Members Card mini-app on Line v13.6.1 allows attackers to send crafted malicious notifications via leakage of the channel access token...

6.9AI score0.00508EPSS
SaveExploits1References1
securityvulns
securityvulns
•added 2014/10/15 12:00 a.m.•89 views

ESA-2014-081 RSA® Identity Management and Governance Authentication Bypass Vulnerability

ESA-2014-081.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2014-081 RSA® Identity Management and Governance Authentication Bypass Vulnerability EMC Identifier: ESA-2014-081 CVE Identifier: CVE-2014-4619 Severity Rating: CVSS v2 Base Score: 9.3 AV:N/AC:M/Au:N/C:C/I:C/A:C Affected products:...

9.3CVSS0.8AI score0.04449EPSS
SaveExploits0
securityvulns
securityvulns
•added 2013/03/02 12:00 a.m.•87 views

ESA-2013-012: RSA® Authentication Agent 7.1.1 for Microsoft Windows® Access Control Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2013-012: RSA® Authentication Agent 7.1.1 for Microsoft Windows® Access Control Vulnerability EMC Identifier: ESA-2013-012 CVE Identifier: CVE-2013-0931 Severity Rating: CVSS v2 Base Score: 6.0 AV:N/AC:M/Au:S/C:P/I:P/A:P Affected Products: Product...

5.4CVSS0.3AI score0.00548EPSS
SaveExploits0
securityvulns
securityvulns
•added 2012/12/10 12:00 a.m.•144 views

ESA-2012-052 RSA NetWitness Informer Cross-Site Request Forgery and Click-jacking Vulnerabilities

ESA-2012-052.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2012-052: RSA NetWitness Informer Cross-Site Request Forgery and Click-jacking Vulnerabilities EMC Identifier: ESA-2012-052 CVE Identifier: CVE-2012-4608 CVE Identifier: CVE-2012-4609 Severity Rating: CVSS v2 Base Score: 6. 8...

6.8CVSS0.4AI score0.00958EPSS
SaveExploits0
Rows per page
Query Builder