Lucene search
+L

8 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2026/08/05 3:15 p.m.•21 views

Malicious code in dolyame-ui-confirmation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dba60f94522cc371a13cce00e6a8e51678812f3f50f3e577fd5e9275295a72e0 [email protected] ships a shim.js that is required from index.js at module load. On import, shim.js detects the host OS/architecture,...

5.5AI score
SaveExploits0References1
OSV
OSV
•added 2026/08/05 3:15 p.m.•14 views

MAL-2026-13148 Malicious code in dolyame-ui-confirmation (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dba60f94522cc371a13cce00e6a8e51678812f3f50f3e577fd5e9275295a72e0 [email protected] ships a shim.js that is required from index.js at module load. On import, shim.js detects the host OS/architecture,...

5.5AI score
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/12 12:00 a.m.•2 views

CVE-2021-21700: Improper Neutralization of Input During Web Page Generation

Jenkins Scriptler Plugin 3.3 and earlier does not escape the name of scripts on the UI when asking to confirm their deletion, resulting in a stored cross-site scripting XSS vulnerability exploitable by exploitable by attackers able to create Scriptler scripts...

5.4CVSS5.7AI score0.00707EPSS
SaveExploits0References2
NVD
NVD
•added 2020/03/10 9:15 p.m.•33 views

CVE-2020-0063

In SurfaceFlinger, it is possible to override UI confirmation screen protected by the TEE. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-143128911...

7.3CVSS7.8AI score0.00168EPSS
SaveExploits0References1
Prion
Prion
•added 2020/03/10 9:15 p.m.•27 views

Design/Logic Flaw

In SurfaceFlinger, it is possible to override UI confirmation screen protected by the TEE. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-143128911...

4.4CVSS7.2AI score0.00168EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2020/03/10 8:02 p.m.•43 views

CVE-2020-0063

In SurfaceFlinger, it is possible to override UI confirmation screen protected by the TEE. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-143128911...

7.9AI score0.00168EPSS
SaveExploits0References1
CVE
CVE
•added 2020/03/10 8:02 p.m.•96 views

CVE-2020-0063

CVE-2020-0063 affects Android SurfaceFlinger, where the UI confirmation screen protected by the TEE can be overridden, enabling local elevation of privilege. Root cause: manipulation of the UI flow in SurfaceFlinger allows bypassing user interaction. Impact: local privilege escalation with high s...

7.3CVSS7.7AI score0.00168EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/03/10 12:00 a.m.•4 views

CVE-2020-0063: Undefined Security Weakness

In SurfaceFlinger, it is possible to override UI confirmation screen protected by the TEE. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-143128911...

7.3CVSS7.3AI score0.00168EPSS
SaveExploits0References1
Rows per page
Query Builder