Lucene search
K

1738 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:46 p.m.3 views

Malicious code in active-model_serializers_validator (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

7AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:46 p.m.5 views

Malicious code in active-model_type_validator (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

7AI score
Exploits0References1
OSV
OSV
added 2024/06/25 1:46 p.m.7 views

MAL-2024-6420 Malicious code in active-model_type_validator (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:46 p.m.5 views

Malicious code in active-comparison_validator (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

7AI score
Exploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 1:45 p.m.4 views

Malicious code in abn-validator (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

7AI score
Exploits0References1
OSV
OSV
added 2024/06/25 1:45 p.m.7 views

MAL-2024-6328 Malicious code in abn-validator (RubyGems)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
Exploits0References1
OSV
OSV
added 2024/06/25 12:46 p.m.6 views

MAL-2024-2504 Malicious code in ifood-bank-account-validator-redux-form-8 (npm)

--- -= Per source details. Do not edit below this line.=-...

7.1AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 12:46 p.m.3 views

Malicious code in ifood-bank-account-validator-redux-form-8 (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
Exploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/25 12:40 p.m.3 views

Malicious code in driverless-acquisition-blue-auth-token-validator (npm)

--- -= Per source details. Do not edit below this line.=-...

7AI score
Exploits0
Veracode
Veracode
added 2024/06/18 8:26 a.m.12 views

Improper Authorization

Evmos is vulnerable to Improper Authorization. The vulnerability is due to allowing a user to create a validator using vested tokens to deposit the self-bond...

6.5CVSS6.6AI score0.00313EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2024/06/17 2:15 p.m.11 views

CVE-2024-37159

Evmos is the Ethereum Virtual Machine EVM Hub on the Cosmos Network. This vulnerability allowed a user to create a validator using vested tokens to deposit the self-bond. This vulnerability is fixed in 18.0.0...

6.5CVSS0.00313EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/06/17 2:3 p.m.15 views

CVE-2024-37159 Evmos is missing create validator check

Evmos is the Ethereum Virtual Machine EVM Hub on the Cosmos Network. This vulnerability allowed a user to create a validator using vested tokens to deposit the self-bond. This vulnerability is fixed in 18.0.0...

3.5CVSS6.8AI score0.00313EPSS
Exploits0References2
CVE
CVE
added 2024/06/17 2:3 p.m.66 views

CVE-2024-37159

CVE-2024-37159 affects Evmos, the EVM Hub on the Cosmos Network. The vulnerability allows a user to create a validator by depositing self-bond using vested tokens, exposing a flaw in validator creation logic. Public references consistently describe Evmos core checks around validator creation and ...

6.5CVSS3.5AI score0.00313EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2024/06/17 2:3 p.m.39 views

CVE-2024-37159 Evmos is missing create validator check

Evmos is the Ethereum Virtual Machine EVM Hub on the Cosmos Network. This vulnerability allowed a user to create a validator using vested tokens to deposit the self-bond. This vulnerability is fixed in 18.0.0...

3.5CVSS0.00313EPSS
Exploits0References2
OSV
OSV
added 2024/06/17 2:3 p.m.28 views

CVE-2024-37159 Evmos is missing create validator check

Evmos is the Ethereum Virtual Machine EVM Hub on the Cosmos Network. This vulnerability allowed a user to create a validator using vested tokens to deposit the self-bond. This vulnerability is fixed in 18.0.0...

3.5CVSS6.2AI score0.0044EPSS
Exploits0References4
OSV
OSV
added 2024/06/15 12:0 a.m.7 views

OPENSUSE-SU-2024:11247-1 python36-openapi-spec-validator-0.2.9-1.5 on GA media

These are all security issues fixed in the python36-openapi-spec-validator-0.2.9-1.5 package on the GA media of openSUSE Tumbleweed...

9.8CVSS9.6AI score0.06081EPSS
Exploits1References1
OSV
OSV
added 2024/06/14 1:59 p.m.62 views

RLSA-2024:3271 Important: bind and dhcp security update

The Berkeley Internet Name Domain BIND is an implementation of the Domain Name System DNS protocols. BIND includes a DNS server named; a resolver library routines for applications to use when interfacing with DNS; and tools for verifying that the DNS server is operating correctly. The Dynamic Hos...

7.5CVSS8.3AI score0.99995EPSS
Exploits1References4
RedHat Linux
RedHat Linux
added 2024/06/13 2:57 p.m.4 views

bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources

A flaw was found in bind9. By flooding a DNSSEC resolver with responses coming from a DNSEC-signed zone using NSEC3, an attacker can lead the targeted resolver to a CPU exhaustion, further leading to a Denial of Service on the targeted host. This vulnerability applies only for systems where DNSSE...

7.5CVSS6.7AI score0.82829EPSS
Exploits1References7
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/11 7:55 a.m.2 views

Malicious code in apl-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c9d01a1289fd5e02d94728d6b0a19ec77687aadfde1e9807050227a0de03dc7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSV
OSV
added 2024/06/11 7:55 a.m.4 views

MAL-2024-1568 Malicious code in apl-validator (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c9d01a1289fd5e02d94728d6b0a19ec77687aadfde1e9807050227a0de03dc7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
Rows per page
Query Builder