Lucene search
+L

117 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:13 p.m.5 views

Malicious code in spr-svg-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9a0110f4b8f50e4633d5a315a6d446989ffe4e78d529a0d9aaa01a59d28229d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/05/31 1:29 p.m.1 views

Malicious code in spr-svg-loaders (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c5b0d1a333a9431186458407626a6494ea307d7fb401b66bd9a25385577eb94 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSV
OSV
added 2022/05/31 1:29 p.m.7 views

MAL-2022-6265 Malicious code in spr-svg-loaders (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4c5b0d1a333a9431186458407626a6494ea307d7fb401b66bd9a25385577eb94 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
HPE Security Bulletins
HPE Security Bulletins
added 2022/03/07 12:0 a.m.3 views

HPESBNS04260 rev.1 - HPE Virtualized Converged NonStop X NS2 VHOST CLIMs Using PolKit's Pkexec Utility, Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. CLIM DVD Installation Software T0853 T0853L03^DBA - T0853L03^DCH CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2021-4034 |...

7.8CVSS7AI score0.94921EPSS
Exploits152
Openbugbounty
Openbugbounty
added 2021/09/20 5:5 p.m.13 views

spr-journal.ru Cross Site Scripting vulnerability OBB-2144664

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Exploits0
HPE Security Bulletins
HPE Security Bulletins
added 2021/02/08 12:0 a.m.3 views

HPESBNS04081 rev.1 - HPE Web ViewPoint Suite, Remote Unauthorized Access

Potential Security Impact: Remote: Unauthorized Access SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Web ViewPoint T0320 - L, J and H series Web ViewPoint Plus T0952 - L, J and H series Web ViewPoint Enterprise T0986 - L, J and H series CVSS Scores: | CVE | CVSS Vector | Base...

9CVSS7AI score0.03597EPSS
Exploits0
Openbugbounty
Openbugbounty
added 2020/07/11 7:31 a.m.6 views

spr-journal.ru Cross Site Scripting vulnerability OBB-1221263

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

6.2AI score
Exploits0
Prion
Prion
added 2020/04/24 6:15 p.m.16 views

Design/Logic Flaw

This document describes a security vulnerability in Blade Maintenance Entity, Integrated Maintenance Entity and Maintenance Entity products. All J/H-series NonStop systems have a security vulnerability associated with an open UDP port 17185 on the Maintenance LAN which could result in information...

9CVSS8.9AI score0.01143EPSS
Exploits0References1Affected Software3
NVD
NVD
added 2016/11/24 7:59 p.m.20 views

CVE-2016-0282

Cross-site scripting XSS vulnerability in IBM iNotes before 8.5.3 FP6 IF2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, aka SPR KLYHAAHNUS...

5.4CVSS5AI score0.00802EPSS
Exploits0References3
Prion
Prion
added 2016/11/24 7:59 p.m.28 views

Cross site scripting

Cross-site scripting XSS vulnerability in IBM iNotes before 8.5.3 FP6 IF2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, aka SPR KLYHAAHNUS...

3.5CVSS5.4AI score0.00802EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2016/11/24 7:41 p.m.25 views

CVE-2016-0282

Cross-site scripting XSS vulnerability in IBM iNotes before 8.5.3 FP6 IF2 allows remote authenticated users to inject arbitrary web script or HTML via a crafted URL, aka SPR KLYHAAHNUS...

5AI score0.00802EPSS
Exploits0References3
CVE
CVE
added 2016/06/29 1:0 a.m.62 views

CVE-2016-0304

CVE-2016-0304 affects IBM Domino Java Console authentication via UNC-share pathnames; vulnerable in IBM Domino 8.5.x before 8.5.3 FP6 IF13 and 9.x before 9.0.1 FP6. Root cause noted as an incomplete fix for CVE-2011-0920. The issue enables an unauthenticated, remote attacker to bypass authenticat...

8.1CVSS8.5AI score0.0246EPSS
Exploits0References1Affected Software1
NVD
NVD
added 2015/08/23 1:59 a.m.14 views

CVE-2015-2015

Cross-site scripting XSS vulnerability in pubnames.ntf aka the Directory template in the web server in IBM Domino before 9.0.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka SPR KLYH8WBPRN...

4.3CVSS5.5AI score0.0095EPSS
Exploits0References2
Prion
Prion
added 2015/08/23 1:59 a.m.12 views

Cross site scripting

Cross-site scripting XSS vulnerability in pubnames.ntf aka the Directory template in the web server in IBM Domino before 9.0.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka SPR KLYH8WBPRN...

4.3CVSS5.9AI score0.0095EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2015/08/23 1:0 a.m.20 views

CVE-2015-2015

Cross-site scripting XSS vulnerability in pubnames.ntf aka the Directory template in the web server in IBM Domino before 9.0.0 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka SPR KLYH8WBPRN...

5.5AI score0.0095EPSS
Exploits0References2
NVD
NVD
added 2015/05/20 10:59 a.m.18 views

CVE-2015-1903

Stack-based buffer overflow in IBM Domino 8.5 before 8.5.3 FP6 IF7 and 9.0 before 9.0.1 FP3 IF3 allows remote attackers to execute arbitrary code via a crafted BMP image, aka SPR KLYH9TSN3Y...

10CVSS7.8AI score0.07958EPSS
Exploits0References4
NVD
NVD
added 2015/05/20 10:59 a.m.16 views

CVE-2015-1902

Stack-based buffer overflow in IBM Domino 8.5 before 8.5.3 FP6 IF7 and 9.0 before 9.0.1 FP3 IF3 allows remote attackers to execute arbitrary code via a crafted BMP image, aka SPR KLYH9TSMLA...

10CVSS7.8AI score0.07958EPSS
Exploits0References4
Prion
Prion
added 2015/05/20 10:59 a.m.15 views

Stack overflow

Stack-based buffer overflow in IBM Domino 8.5 before 8.5.3 FP6 IF7 and 9.0 before 9.0.1 FP3 IF3 allows remote attackers to execute arbitrary code via a crafted BMP image, aka SPR KLYH9TSN3Y...

10CVSS8.5AI score0.07958EPSS
Exploits0References4Affected Software1
Prion
Prion
added 2015/05/20 10:59 a.m.23 views

Stack overflow

Stack-based buffer overflow in IBM Domino 8.5 before 8.5.3 FP6 IF7 and 9.0 before 9.0.1 FP3 IF3 allows remote attackers to execute arbitrary code via a crafted BMP image, aka SPR KLYH9TSMLA...

10CVSS8.5AI score0.07958EPSS
Exploits0References4Affected Software1
NVD
NVD
added 2015/04/21 4:59 p.m.17 views

CVE-2015-0135

IBM Domino 8.5 before 8.5.3 FP6 IF4 and 9.0 before 9.0.1 FP3 IF2 allows remote attackers to execute arbitrary code or cause a denial of service integer truncation and application crash via a crafted GIF image, aka SPR KLYH9T7NT9...

10CVSS7.5AI score0.423EPSS
Exploits0References2
Rows per page
Query Builder