Lucene search
+L

9 matches found

vulnersOsv
vulnersOsv
•added 2026/04/08 12:14 a.m.•4 views

@contfu/client (0.0.2), @contfu/contfu (>=0.0.3, <=0.0.11) +3 more potentially affected by CVE-2026-39356 via drizzle-orm (1.0.0-beta.19)

drizzle-orm NPM version 1.0.0-beta.19 is affected by a known vulnerability. The following packages have a transitive dependency on drizzle-orm and may be impacted: - @contfu/client 0.0.2 - @contfu/contfu =0.0.3, =0.0.3, =0.0.0, =0.0.4 Source cves: CVE-2026-39356 Source advisory: GHSA-GPJ5-G38J-94...

7.5CVSS5.8AI score0.00392EPSS
SaveExploits0
CVE
CVE
•added 2026/03/09 10:31 p.m.•42 views

CVE-2026-30870

CVE-2026-30870 affects PowerSync Service (server-side of the PowerSync sync engine). In version 1.20.0, using new sync streams with config.edition: 3, certain subquery filters could be ignored when deciding which data to sync to users, potentially allowing authenticated users to receive data that...

6.5CVSS5.9AI score0.00213EPSS
SaveExploits0References1
NVD
NVD
•added 2021/10/04 7:15 p.m.•38 views

CVE-2021-41093

Wire is an open source secure messenger. In affected versions if the an attacker gets an old but valid access token they can take over an account by changing the email. This issue has been resolved in version 3.86 which uses a new endpoint which additionally requires an authentication cookie. See...

9.8CVSS0.01491EPSS
SaveExploits0References5
CVE
CVE
•added 2021/10/04 6:15 p.m.•79 views

CVE-2021-41093

CVE-2021-41093 concerns Wire, an open-source secure messenger. Affected: Wire iOS components where an attacker with an old but valid access token could takeover the account by changing the user email. Root cause: improper session/token handling that allows account takeover. Impact: high risk (per...

9.8CVSS8.6AI score0.01491EPSS
SaveExploits0References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/10/04 12:00 a.m.•11 views

CVE-2021-41093: Improper Authorization

Wire is an open source secure messenger. In affected versions if the an attacker gets an old but valid access token they can take over an account by changing the email. This issue has been resolved in version 3.86 which uses a new endpoint which additionally requires an authentication cookie. See...

9.8CVSS5.7AI score0.01491EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2009/02/17 12:00 a.m.•26 views

Fedora Update for synce-sync-engine FEDORA-2008-0680

Check for the Version of synce-sync-engine OpenVAS Vulnerability Test Fedora Update for synce-sync-engine FEDORA-2008-0680 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

10CVSS0.2AI score0.06778EPSS
SaveExploits2References2
OpenVAS
OpenVAS
•added 2009/02/17 12:00 a.m.•21 views

Fedora Update for synce-sync-engine FEDORA-2008-0680

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

6.5AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2008/03/07 12:00 a.m.•24 views

Fedora 8 : librapi-0.11-1.fc8 / librra-0.11-1.fc8 / libsynce-0.11-2.fc8 / odccm-0.11-1.fc8 / etc (2008-0680)

The remote Fedora host is missing one or more security updates : librra-0.11-1.fc8 : - Wed Jan 9 2008 Andreas Bierfert - 0.11-1 - version upgrade - Fri Dec 21 2007 Andreas Bierfert - 0.10.0-2 - rework BR - Wed May 9 2007 Aurelien Bompard 0.10.0-1 - version 0.10.0 synce-serial-0.11-1.fc8 : - Wed J...

10CVSS5.5AI score0.06778EPSS
SaveExploits2References16
Fedora
Fedora
•added 2008/03/06 4:33 p.m.•102 views

[SECURITY] Fedora 8 Update: synce-sync-engine-0.11-6.fc8

Synce synchronization engine for use with libopensync...

10CVSS1.6AI score0.06778EPSS
SaveExploits2
Rows per page
Query Builder