1256 matches found
@art-ws/db-context (>=2.0.10 <=2.0.20) potentially affected by unknown CVE via @art-ws/common (>=2.0.10 <=2.0.21)
@art-ws/common NPM version =2.0.10, =2.0.10, =2.0.20 Source cves: unknown CVE Source advisory: SNYK:JS-ARTWSCOMMON-12744467...
@art-ws/fastify-http-server (>=2.0.1 <=2.0.23), @art-ws/openapi (>=0.1.1 <=0.1.8) potentially affected by unknown CVE via @art-ws/http-server (>=2.0.1 <=2.0.20)
@art-ws/http-server NPM version =2.0.1, =2.0.1, =0.1.1, =0.1.8 Source cves: unknown CVE Source advisory: SNYK:JS-ARTWSHTTPSERVER-12744475...
Embedded Malicious Code
Overview Affected versions of this package are vulnerable to Embedded Malicious Code. Compromised versions of this package contain a file called bundle.js that exfiltrates secrets from the user's accounts, including credentials and API tokens. It also downloads malicious files and repackages them...
Malicious code in @eooce/ws (npm)
The package @eooce/ws was found to contain malicious code...
MAL-2025-42487 Malicious code in @eooce/ws (npm)
The package @eooce/ws was found to contain malicious code...
Linux Distros Unpatched Vulnerability : CVE-2020-13577
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A denial-of-service vulnerability exists in the WS-Security plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to denial o...
Linux Distros Unpatched Vulnerability : CVE-2020-13576
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A code execution vulnerability exists in the WS-Addressing plugin functionality of Genivia gSOAP 2.8.107. A specially crafted SOAP request can lead to remote co...
CVE-2025-8062
The WS Theme Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wsweather shortcode in all versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
Linux Distros Unpatched Vulnerability : CVE-2016-10542
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ws is a simple to use, blazing fast and thoroughly tested websocket client, server and console for node.js, up-to-date against RFC-6455. By sending an overly lo...
CVE-2025-8062 WS Theme Addons <= 2.0.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via ws_weather Shortcode
The WS Theme Addons plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's wsweather shortcode in all versions up to, and including, 2.0.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated...
PT-2025-34515 · WordPress · Ws Theme Addons
Name of the Vulnerable Software and Affected Versions: WS Theme Addons plugin for WordPress versions prior to 2.0.1 Description: The WS Theme Addons plugin for WordPress is susceptible to Stored Cross-Site Scripting through the ws weather shortcode. Insufficient input sanitization and output...
Malicious code in gravitlauncher-ws-api (npm)
The package gravitlauncher-ws-api was found to contain malicious code...
Malicious code in ws-ui-tool (npm)
The package ws-ui-tool was found to contain malicious code...
Malicious code in twilio-gladia-ws (npm)
The package twilio-gladia-ws was found to contain malicious code...
Malicious code in mubiz-ws-client (npm)
The package mubiz-ws-client was found to contain malicious code...
Malicious code in mubiz-ws-cli (npm)
The package mubiz-ws-cli was found to contain malicious code...
MAL-2025-26860 Malicious code in mubiz-ws-client (npm)
The package mubiz-ws-client was found to contain malicious code...
MAL-2025-26859 Malicious code in mubiz-ws-cli (npm)
The package mubiz-ws-cli was found to contain malicious code...