Lucene search
+L

31 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2025/07/04 9:17 a.m.8 views

Malicious code in ca-ui-carbon-toolkit (npm)

The package communicates with a domain associated with malicious activity. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e7fe942358c29b14aaa3755810e04ffe2cd696331434ed03a940060449bb9d05 Any computer that has this package installed or running should be considered...

7AI score
SaveExploits0References1
OSV
OSV
added 2024/11/22 12:36 p.m.13 views

MAL-2024-10878 Malicious code in @ba-ui-toolkit/ba-graphics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cecc8f033039168aed0576db76b1cae3235b3ec9b6634c22a38c1696a4a80fc1 The OpenSSF Package Analysis project identified '@ba-ui-toolkit/ba-graphics' @ 7.1.11 npm as malicious. It is considered malicious because: - Th...

7.3AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 12:19 p.m.9 views

Malicious code in @caesars-digital/ui-toolkit (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
SaveExploits0
OSV
OSV
added 2024/06/25 12:19 p.m.9 views

MAL-2024-3259 Malicious code in @caesars-digital/ui-toolkit (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
SaveExploits0
NVD
NVD
added 2020/09/11 12:15 a.m.23 views

CVE-2014-1420

On desktop, Ubuntu UI Toolkit's StateSaver would serialise data on tmp/ files which an attacker could use to expose potentially sensitive data. StateSaver would also open files without the OEXCL flag. An attacker could exploit this to launch a symlink attack, though this is partially mitigated by...

3.8CVSS0.00504EPSS
SaveExploits0References2
Prion
Prion
added 2020/09/11 12:15 a.m.25 views

Open redirect

On desktop, Ubuntu UI Toolkit's StateSaver would serialise data on tmp/ files which an attacker could use to expose potentially sensitive data. StateSaver would also open files without the OEXCL flag. An attacker could exploit this to launch a symlink attack, though this is partially mitigated by...

2.1CVSS6.8AI score0.00504EPSS
SaveExploits0References2Affected Software1
UbuntuCve
UbuntuCve
added 2020/09/11 12:15 a.m.40 views

CVE-2014-1420

On desktop, Ubuntu UI Toolkit's StateSaver would serialise data on tmp/ files which an attacker could use to expose potentially sensitive data. StateSaver would also open files without the OEXCL flag. An attacker could exploit this to launch a symlink attack, though this is partially mitigated by...

3.8CVSS5.9AI score0.00504EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2020/09/10 11:55 p.m.28 views

CVE-2014-1420 Insecure temp file usage in Ubuntu UI toolkit

On desktop, Ubuntu UI Toolkit's StateSaver would serialise data on tmp/ files which an attacker could use to expose potentially sensitive data. StateSaver would also open files without the OEXCL flag. An attacker could exploit this to launch a symlink attack, though this is partially mitigated by...

3.8CVSS4.1AI score0.00504EPSS
SaveExploits0References2
CVE
CVE
added 2020/09/10 11:55 p.m.77 views

CVE-2014-1420

The CVE-2014-1420 entry concerns Ubuntu UI Toolkit’s StateSaver, which serializes data to tmp/ files and can open files without O_EXCL, enabling a local symlink attack that could expose sensitive data. The issue is described as a local, low-severity vulnerability with partial mitigations due to U...

3.8CVSS3.8AI score0.00504EPSS
SaveExploits0References2Affected Software1
Fedora
Fedora
added 2013/01/15 2:36 a.m.63 views

[SECURITY] Fedora 17 Update: pl-6.0.2-4.fc17

ISO/Edinburgh-style Prolog compiler including modules, auto-load, libraries, Garbage-collector, stack-expandor, C/C++-interface, GNU-readline interface, very fast compiler. Including packages clib Unix process control and sockets, cpp C++ interface, sgml reading XML/SGML, sgml/RDF reading RDF int...

7.5CVSS2.4AI score0.04019EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2013/01/15 12:00 a.m.20 views

Fedora Update for pl FEDORA-2013-0211

Check for the Version of pl OpenVAS Vulnerability Test Fedora Update for pl FEDORA-2013-0211 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the...

7.5CVSS6.4AI score0.04019EPSS
SaveExploits0References2
Rows per page
Query Builder