Lucene search
+L

192 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2025/08/14 6:52 p.m.2 views

Malicious code in test-mlw2-bawrs-trove (npm)

The package test-mlw2-bawrs-trove was found to contain malicious code...

7AI score
Exploits0
OSV
OSV
added 2025/08/14 6:52 p.m.4 views

MAL-2025-34942 Malicious code in test-mlw2-bawrs-trove (npm)

The package test-mlw2-bawrs-trove was found to contain malicious code...

7.2AI score
Exploits0
OSV
OSV
added 2025/08/14 6:52 p.m.3 views

MAL-2025-35576 Malicious code in test-mlw2-jetty-trove (npm)

The package test-mlw2-jetty-trove was found to contain malicious code...

7.2AI score
Exploits0
OSV
OSV
added 2025/08/14 6:52 p.m.1 views

MAL-2025-8512 Malicious code in @malware-test-books-trove-dorts-lunar/test-mlw3-books-trove-dorts-lunar (npm)

The package @malware-test-books-trove-dorts-lunar/test-mlw3-books-trove-dorts-lunar was found to contain malicious code...

7.2AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/07/03 12:38 p.m.5 views

Malicious code in @emersonecologics/emerson-angular-trove (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c229693a6cfa1c30c9c957144ab93c804e134a54c587ad75b4e2eb860d89b778 Any computer that has this package installed or running should be considered...

6.8AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2025/07/01 9:59 a.m.4 views

Malicious code in emerson-angular-trove (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3710a484d9498defd18d6636486ebe053b8e10147655e6735b1d3769cb3a8676 Any computer that has this package installed or running should be considered...

6.8AI score
Exploits0References1
OSV
OSV
added 2025/07/01 9:59 a.m.3 views

MAL-2025-5338 Malicious code in emerson-angular-trove (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3710a484d9498defd18d6636486ebe053b8e10147655e6735b1d3769cb3a8676 Any computer that has this package installed or running should be considered...

7AI score
Exploits0References1
OSV
OSV
added 2024/09/15 10:3 p.m.17 views

RHSA-2014:1939 Red Hat Security Advisory: openstack-trove security update

Bulletin has no description...

2.1CVSS6AI score0.00528EPSS
Exploits1References11
Tenable Nessus
Tenable Nessus
added 2024/06/03 12:0 a.m.13 views

RHEL 6 : openstack-trove (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - openstack-trove: multiple insecure /tmp file usage issues CVE-2015-3156 Note that Nessus has not tested for this...

5.5CVSS7.4AI score0.00459EPSS
Exploits0References1
OSV
OSV
added 2024/05/18 12:30 a.m.13 views

GHSA-9328-GCFQ-P269 Tor Arti's STUB circuits incorrectly have a length of 2

In Tor Arti before 1.2.3, STUB circuits incorrectly have a length of 2 with lite vanguards, aka TROVE-2024-003...

7.5CVSS6.4AI score0.00298EPSS
Exploits0References10
OSV
OSV
added 2024/05/18 12:30 a.m.12 views

GHSA-C96H-CXX6-RMG9 Tor path lengths too short when "full Vanguards" configured

In Tor Arti before 1.2.3, circuits sometimes incorrectly have a length of 3 with full vanguards, aka TROVE-2024-004...

5.9CVSS6.4AI score0.00298EPSS
Exploits0References9
Github Security Blog
Github Security Blog
added 2024/05/18 12:30 a.m.20 views

Tor Arti's STUB circuits incorrectly have a length of 2

In Tor Arti before 1.2.3, STUB circuits incorrectly have a length of 2 with lite vanguards, aka TROVE-2024-003...

6.2CVSS7.1AI score0.00186EPSS
Exploits0References10Affected Software2
Github Security Blog
Github Security Blog
added 2024/05/18 12:30 a.m.18 views

Tor path lengths too short when "full Vanguards" configured

In Tor Arti before 1.2.3, circuits sometimes incorrectly have a length of 3 with full vanguards, aka TROVE-2024-004...

7.3CVSS7.1AI score0.00298EPSS
Exploits0References9Affected Software2
Tenable Nessus
Tenable Nessus
added 2024/05/18 12:0 a.m.11 views

FreeBSD : Arti -- Security issues related to circuit construction (f393b5a7-1535-11ef-8064-c5610a6efffb)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the f393b5a7-1535-11ef-8064-c5610a6efffb advisory. - In Tor Arti before 1.2.3, STUB circuits incorrectly have a length of 2 with lite vanguards,...

7.3CVSS5.6AI score0.00298EPSS
Exploits0References5
NVD
NVD
added 2024/05/17 10:15 p.m.12 views

CVE-2024-35313

In Tor Arti before 1.2.3, circuits sometimes incorrectly have a length of 3 with full vanguards, aka TROVE-2024-004...

7.3CVSS6.4AI score0.00298EPSS
Exploits0References1
NVD
NVD
added 2024/05/17 10:15 p.m.15 views

CVE-2024-35312

In Tor Arti before 1.2.3, STUB circuits incorrectly have a length of 2 with lite vanguards, aka TROVE-2024-003...

6.2CVSS6.4AI score0.00186EPSS
Exploits0References1
CVE
CVE
added 2024/05/17 9:29 p.m.99 views

CVE-2024-35313

CVE-2024-35313 affects Tor Arti prior to 1.2.3, where circuits may incorrectly have a length of 3 when full vanguards are used (aka TROVE-2024-004). The vulnerability is documented with CVSS v3.1 base score 7.3 (Network, High, Privileges=None, User Interaction=None; Confidentiality/Integrity/Avai...

7.3CVSS6.5AI score0.00298EPSS
Exploits0References1
CVE
CVE
added 2024/05/17 9:29 p.m.81 views

CVE-2024-35312

CVE-2024-35312 covers Tor Arti prior to version 1.2.3, where STUB circuits sometimes have an incorrect length of 2 (with lite vanguards). This issue is documented as TROVE-2024-003/004 in related advisories (OSV/GHSA entries) and is confirmed by multiple connected sources noting the specific mis-...

6.2CVSS6.5AI score0.00186EPSS
Exploits0References1
OSV
OSV
added 2024/05/17 9:29 p.m.10 views

CVE-2024-35312

In Tor Arti before 1.2.3, STUB circuits incorrectly have a length of 2 with lite vanguards, aka TROVE-2024-003...

6.2CVSS6.9AI score0.00298EPSS
Exploits0References3
OSV
OSV
added 2024/05/15 12:0 p.m.17 views

RUSTSEC-2024-0340 Tor path lengths too short when "full Vanguards" configured

Description When building anonymizing circuits to or from an onion service with full vanguards enabled, the circuit manager code would build the circuits with one hop too few. Impact This makes users of this code more vulnerable to some kinds of traffic analysis when they run or visit onion...

7.3CVSS6.5AI score0.00298EPSS
Exploits0References3
Rows per page
Query Builder