28 matches found
CVE-2026-97705
The Moleculer microservices framework for Node.js is vulnerable to an unauthenticated Denial of Service (DoS) in versions prior to 0.14.36 and 0.15.2 . The root cause is located in the Parser._write function within src/transporters/tcp/parser.js, where Buffer.prototype.readInt32BE is used to read...
PT-2026-137109
Moleculer is a progressive microservices framework for Node.js. Prior to 0.14.36 and 0.15.2, Parser. write in src/transporters/tcp/parser.js used Buffer.prototype.readInt32BE to read a signed packet length, so a remote unauthenticated peer could supply a negative value that caused...
Malicious code in integreat-transporter-rabbitmq (npm)
The package integreat-transporter-rabbitmq was found to contain malicious code. --- Credit: OpenSSF source...
EUVD-2016-8516
Malware in sbrugna...
Malicious code in shopify_transporter (npm)
The package shopifytransporter was found to contain malicious code...
MAL-2025-23267 Malicious code in integreat-transporter-rabbitmq (npm)
The package integreat-transporter-rabbitmq was found to contain malicious code...
MAL-2023-1542 Malicious code in lp-transporter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 11c496a4534fa74ceededa76f0d7d5d65094550a9ba71e4ee4f25e982cc16beb The OpenSSF Package Analysis project identified 'lp-transporter' @ 99.0.0 npm as malicious. It is considered malicious because: - The package...
Malicious code in lp-transporter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 11c496a4534fa74ceededa76f0d7d5d65094550a9ba71e4ee4f25e982cc16beb The OpenSSF Package Analysis project identified 'lp-transporter' @ 99.0.0 npm as malicious. It is considered malicious because: - The package...
Nintendo: [WiiU/Switch] nullptr dereference in the ENL framework
Vulnerability description not provided...
CVE-2020-15851
Lack of access control in Nakivo Backup & Replication Transporter version 9.4.0.r43656 allows remote users to access unencrypted backup repositories and the Nakivo Controller configuration via a network accessible transporter service. It is also possible to create or delete backup repositories...
CVE-2020-15851
CVE-2020-15851 concerns Nakivo Backup & Replication Transporter (version 9.4.0.r43656). The issue is a lack of access control that allows remote users to access unencrypted backup repositories and the Nakivo Controller configuration through a network-accessible transporter service, with the abili...
CVE-2020-15851
Lack of access control in Nakivo Backup & Replication Transporter version 9.4.0.r43656 allows remote users to access unencrypted backup repositories and the Nakivo Controller configuration via a network accessible transporter service. It is also possible to create or delete backup repositories...
PT-2020-14669
Name of the Vulnerable Software and Affected Versions Nakivo Backup & Replication Transporter version 9.4.0.r43656 Description The issue is related to a lack of access control, allowing remote users to access unencrypted backup repositories and the Nakivo Controller configuration via a...
CVE-2020-15851: Missing Authentication for Critical Function
Lack of access control in Nakivo Backup & Replication Transporter version 9.4.0.r43656 allows remote users to access unencrypted backup repositories and the Nakivo Controller configuration via a network accessible transporter service. It is also possible to create or delete backup repositories...
CVE-2016-7666
An issue was discovered in certain Apple products. Transporter before 1.9.2 is affected. The issue involves the "iTMSTransporter" component, which allows attackers to obtain sensitive information via a crafted EPUB...
Design/Logic Flaw
An issue was discovered in certain Apple products. Transporter before 1.9.2 is affected. The issue involves the "iTMSTransporter" component, which allows attackers to obtain sensitive information via a crafted EPUB...
CVE-2016-7666
An issue was discovered in certain Apple products. Transporter before 1.9.2 is affected. The issue involves the "iTMSTransporter" component, which allows attackers to obtain sensitive information via a crafted EPUB...
CVE-2016-7666
CVE-2016-7666 affects Apple Transporter/iTMSTransporter in Apple products prior to Transporter 1.9.2. The issue arises from parsing a crafted EPUB, causing an information disclosure of user data. Impact is information disclosure (no integrity/availability impact reported); exploitation context is...
CVE-2016-7666: Exposure of Sensitive Information to an Unauthorized Actor
An issue was discovered in certain Apple products. Transporter before 1.9.2 is affected. The issue involves the "iTMSTransporter" component, which allows attackers to obtain sensitive information via a crafted EPUB...
PT-2017-9235
Name of the Vulnerable Software and Affected Versions Transporter versions prior to 1.9.2 Description The issue involves the iTMSTransporter component, which allows attackers to obtain sensitive information via a crafted EPUB. Recommendations For Transporter versions prior to 1.9.2, update to...