Lucene search
+L

427 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2023/01/30 10:11 a.m.6 views

Malicious code in wrf-grid-setup (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware eaf07ec4e4422ea585def46dd4f2468efa7d305b876e927ecdfa67cb4d1258f2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2023/01/30 10:11 a.m.6 views

Malicious code in wrf-distribute (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2de6c33366b6a4984966301e4c28d68e52b28012251e02e8922736664cc6347f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2023/01/30 10:11 a.m.8 views

MAL-2023-970 Malicious code in wrf-distribute (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2de6c33366b6a4984966301e4c28d68e52b28012251e02e8922736664cc6347f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Snyk
Snyk
added 2023/01/29 3:29 p.m.2 views

Malicious Package

Overview wrf-distribute is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package wa...

9.8CVSS7.1AI score
SaveExploits0References3
Snyk
Snyk
added 2023/01/29 3:29 p.m.4 views

Malicious Package

Overview wrf-grid-setup is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package wa...

9.8CVSS7.1AI score
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2021/06/25 12:0 a.m.38 views

Cisco Webex Player Memory Corruption (cisco-sa-webex-player-kOf8zVT)

The version of Cisco Webex Player installed on the remote host is affected by a memory corruption vulnerability due to insufficient validation of values in Webex recording files that are in Webex Recording Format WRF. An attacker could exploit this by sending a user a malicious WRF file through a...

7.8CVSS7.9AI score0.01024EPSS
SaveExploits0References3
NVD
NVD
added 2021/06/04 5:15 p.m.28 views

CVE-2021-1526

A vulnerability in Cisco Webex Player for Windows and MacOS could allow an attacker to execute arbitrary code on an affected system. This vulnerability is due to insufficient validation of values in Webex recording files that are in Webex Recording Format WRF. An attacker could exploit this...

7.8CVSS0.01024EPSS
SaveExploits0References1
NVD
NVD
added 2021/06/04 5:15 p.m.18 views

CVE-2021-1527

A vulnerability in Cisco Webex Player for Windows and MacOS could allow an attacker to cause the affected software to terminate or to gain access to memory state information that is related to the vulnerable application. The vulnerability is due to insufficient validation of values in Webex...

6.1CVSS0.00576EPSS
SaveExploits0References1
NVD
NVD
added 2021/06/04 5:15 p.m.23 views

CVE-2021-1503

A vulnerability in Cisco Webex Network Recording Player for Windows and MacOS and Cisco Webex Player for Windows and MacOS could allow an attacker to execute arbitrary code on an affected system. This vulnerability is due to insufficient validation of values in Webex recording files that are in...

7.8CVSS0.01024EPSS
SaveExploits0References1
OSV
OSV
added 2021/06/04 5:15 p.m.6 views

CVE-2021-1502

A vulnerability in Cisco Webex Network Recording Player for Windows and MacOS and Cisco Webex Player for Windows and MacOS could allow an attacker to execute arbitrary code on an affected system. The vulnerability is due to insufficient validation of values within Webex recording files formatted ...

7.8CVSS6.1AI score0.01081EPSS
SaveExploits0References1
Prion
Prion
added 2021/06/04 5:15 p.m.22 views

Input validation

A vulnerability in Cisco Webex Network Recording Player for Windows and MacOS and Cisco Webex Player for Windows and MacOS could allow an attacker to execute arbitrary code on an affected system. This vulnerability is due to insufficient validation of values in Webex recording files that are in...

6.8CVSS7.8AI score0.01024EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2021/06/04 4:45 p.m.21 views

CVE-2021-1527 Cisco Webex Player Memory Corruption Vulnerability

A vulnerability in Cisco Webex Player for Windows and MacOS could allow an attacker to cause the affected software to terminate or to gain access to memory state information that is related to the vulnerable application. The vulnerability is due to insufficient validation of values in Webex...

5.3CVSS6.4AI score0.00576EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2021/06/04 4:45 p.m.9 views

CVE-2021-1527 Cisco Webex Player Memory Corruption Vulnerability

A vulnerability in Cisco Webex Player for Windows and MacOS could allow an attacker to cause the affected software to terminate or to gain access to memory state information that is related to the vulnerable application. The vulnerability is due to insufficient validation of values in Webex...

5.3CVSS6.4AI score0.00576EPSS
SaveExploits0References1
CVE
CVE
added 2021/06/04 4:45 p.m.61 views

CVE-2021-1527

CVE-2021-1527 concerns Cisco Webex Player (Windows/macOS). The issue arises from insufficient validation of values in Webex recording files stored in Webex Recording Format (WRF); a malicious WRF file could be opened from a link or email attachment to cause the player to crash and potentially rev...

6.1CVSS5.8AI score0.00576EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/06/04 4:45 p.m.19 views

CVE-2021-1526 Cisco Webex Player Memory Corruption Vulnerability

A vulnerability in Cisco Webex Player for Windows and MacOS could allow an attacker to execute arbitrary code on an affected system. This vulnerability is due to insufficient validation of values in Webex recording files that are in Webex Recording Format WRF. An attacker could exploit this...

7.8CVSS8AI score0.01024EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2021/06/04 4:45 p.m.7 views

CVE-2021-1526 Cisco Webex Player Memory Corruption Vulnerability

A vulnerability in Cisco Webex Player for Windows and MacOS could allow an attacker to execute arbitrary code on an affected system. This vulnerability is due to insufficient validation of values in Webex recording files that are in Webex Recording Format WRF. An attacker could exploit this...

7.8CVSS7.5AI score0.01024EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2021/06/04 4:45 p.m.11 views

CVE-2021-1503 Cisco Webex Network Recording Player and Webex Player Memory Corruption Vulnerability

A vulnerability in Cisco Webex Network Recording Player for Windows and MacOS and Cisco Webex Player for Windows and MacOS could allow an attacker to execute arbitrary code on an affected system. This vulnerability is due to insufficient validation of values in Webex recording files that are in...

7.8CVSS7.5AI score0.01024EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/06/04 4:45 p.m.23 views

CVE-2021-1503 Cisco Webex Network Recording Player and Webex Player Memory Corruption Vulnerability

A vulnerability in Cisco Webex Network Recording Player for Windows and MacOS and Cisco Webex Player for Windows and MacOS could allow an attacker to execute arbitrary code on an affected system. This vulnerability is due to insufficient validation of values in Webex recording files that are in...

7.8CVSS8AI score0.01024EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2021/06/04 4:45 p.m.26 views

CVE-2021-1502 Cisco Webex Network Recording Player and Webex Player Memory Corruption Vulnerability

A vulnerability in Cisco Webex Network Recording Player for Windows and MacOS and Cisco Webex Player for Windows and MacOS could allow an attacker to execute arbitrary code on an affected system. The vulnerability is due to insufficient validation of values within Webex recording files formatted ...

7.8CVSS8AI score0.01081EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2021/06/04 4:45 p.m.13 views

CVE-2021-1502 Cisco Webex Network Recording Player and Webex Player Memory Corruption Vulnerability

A vulnerability in Cisco Webex Network Recording Player for Windows and MacOS and Cisco Webex Player for Windows and MacOS could allow an attacker to execute arbitrary code on an affected system. The vulnerability is due to insufficient validation of values within Webex recording files formatted ...

7.8CVSS7.6AI score0.01081EPSS
SaveExploits0References1
Rows per page
Query Builder