Vulnerabilities

Last updated 3 hours ago
Filters
Severity
Critical Severity
CVSS Score Range: 9.0–10.0
Critical severity vulnerabilities (CVSS 9.0–10.0). These represent the highest impact issues.
High Severity
CVSS Score Range: 7.0–8.9
High severity vulnerabilities (CVSS 7.0–8.9). Serious vulnerabilities that should be prioritized soon after critical fixes.
Medium Severity
CVSS Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
Low Severity
CVSS Score Range: < 4.0
Low severity vulnerabilities (CVSS < 4.0). Hygiene issues that can accumulate but pose lower immediate risk.
Unknown Severity
CVSS Score Range: No score
Vulnerabilities without an assigned CVSS score. Severity is not determinable from available data.
Package Summary Severity Published Modified
uv uv: Path traversal on Windows through wheel extraction Medium Risk 6.0 9 hours ago 8 hours ago
uv uv: Path traversal on Windows through wheel extraction Medium Risk 6.0 9 hours ago 8 hours ago
@yuva2210/okx-poc-preinstall Malicious code in @yuva2210/okx-poc-preinstall (npm) Unknown 13 days ago 11 days ago
@yuva2210/poc-depconf Malicious code in @yuva2210/poc-depconf (npm) Unknown 13 days ago 11 days ago
uv uv vulnerable to arbitrary file deletion through RECORD entries Low Risk 3.0 5 months ago 26 days ago
github.com/neuvector/neuvector NeuVector admin account has insecure default password Critical 9.8 1 year ago 26 days ago
github.com/neuvector/scanner NeuVector scanner insecurely handles passwords as command arguments Low Risk 3.8 7 months ago 26 days ago
github.com/neuvector/neuvector NeuVector OpenID Connect is vulnerable to man-in-the-middle (MITM) High Risk 8.8 9 months ago 26 days ago
github.com/neuvector/neuvector NeuVector telemetry sender is vulnerable to MITM and DoS High Risk 8.6 11 months ago 26 days ago
github.com/neuvector/neuvector NeuVector Enforcer is vulnerable to Command Injection and Buffer overflow Critical 9.9 11 months ago 26 days ago
github.com/neuvector/neuvector NeuVector is shipping cryptographic material into its binary Medium Risk 6.5 11 months ago 26 days ago
github.com/neuvector/neuvector NeuVector process with sensitive arguments lead to leakage Medium Risk 5.3 1 year ago 26 days ago
github.com/neuvector/neuvector NeuVector has an insecure password storage and is vulnerable to rainbow attack Medium Risk 5.3 1 year ago 26 days ago
github.com/neuvector/neuvector JWT token compromise can allow malicious actions including Remote Code Execution (RCE) Critical 9.5 3 years ago 26 days ago
abcdefghijklnmopqrstuvwxyz Malicious code in abcdefghijklnmopqrstuvwxyz (npm) Unknown 1 month ago 1 month ago
@yuva2210/okx-poc-rce-impact Malicious code in @yuva2210/okx-poc-rce-impact (npm) Unknown 1 month ago 1 month ago
uvhttp-custom Malicious code in uvhttp-custom (PyPI) Unknown 1 month ago 1 month ago
anguvarjs Malicious code in anguvarjs (npm) Unknown 3 months ago 1 month ago
@yuva2210/htx-poc-skills-rce Malicious code in @yuva2210/htx-poc-skills-rce (npm) Unknown 1 month ago 1 month ago
nuvyra-marketplace-sdk Malicious code in nuvyra-marketplace-sdk (npm) Unknown 1 month ago 1 month ago
3layerdipstackjsuvtk Malicious code in 3layerdipstackjsuvtk (npm) Unknown 1 month ago 1 month ago
secure-test-browser-l8ruvmc8 Malicious code in secure-test-browser-l8ruvmc8 (npm) Unknown 1 month ago 1 month ago
hngfykuvgh4 Malicious code in hngfykuvgh4 (npm) Unknown 1 month ago 1 month ago
lbrssltutuvwp Malicious code in lbrssltutuvwp (RubyGems) Unknown 3 months ago 2 months ago
oaijhguviith Malicious code in oaijhguviith (RubyGems) Unknown 3 months ago 2 months ago
aiuvipuscwac Malicious code in aiuvipuscwac (RubyGems) Unknown 3 months ago 2 months ago
uv uv allows ZIP payload obfuscation through parsing differentials Medium Risk 6.0 11 months ago 2 months ago
uv uv has ZIP payload obfuscation through parsing differentials Medium Risk 6.3 7 months ago 2 months ago
uv No summary available Medium Risk 6.3 7 months ago 2 months ago
uv uv allows ZIP payload obfuscation through parsing differentials Medium Risk 6.0 1 year ago 3 months ago
uv uv allows ZIP payload obfuscation through parsing differentials Unknown 3 months ago 3 months ago
github.com/neuvector/neuvector NeuVector has an insecure password storage vulnerable to rainbow attack in github.com/neuvector/neuvector Unknown 1 year ago 3 months ago
github.com/neuvector/neuvector NeuVector process with sensitive arguments lead to leakage in github.com/neuvector/neuvector Unknown 1 year ago 3 months ago
github.com/neuvector/neuvector NeuVector telemetry sender is vulnerable to MITM and DoS in github.com/neuvector/neuvector Unknown 11 months ago 3 months ago
github.com/neuvector/neuvector NeuVector OpenID Connect is vulnerable to man-in-the-middle (MITM) in github.com/neuvector/neuvector Unknown 9 months ago 3 months ago
github.com/neuvector/neuvector NeuVector admin account has insecure default password in github.com/neuvector/neuvector Unknown 1 year ago 3 months ago
uv uv is vulnerable to arbitrary file write through entry point names Medium Risk 6.0 4 months ago 4 months ago
uv uv is vulnerable to arbitrary file write through entry point names Medium Risk 6.0 4 months ago 4 months ago
01-0redi7qgbz0uv Malicious code in 01-0redi7qgbz0uv (npm) Unknown 4 months ago 4 months ago
github.com/neuvector/neuvector JWT token compromise can allow malicious actions including Remote Code Execution (RCE) in github.com/neuvector/neuvector Unknown 1 year ago 5 months ago
3rugfbe8rivferiuv Malicious code in 3rugfbe8rivferiuv (NuGet) Unknown 6 months ago 6 months ago
github.com/neuvector/scanner NeuVector scanner insecurely handles passwords as command arguments in github.com/neuvector/scanner Unknown 7 months ago 7 months ago
github.com/neuvector/neuvector NeuVector is shipping cryptographic material into its binary in github.com/neuvector/neuvector Unknown 11 months ago 8 months ago
github.com/neuvector/neuvector NeuVector Enforcer is vulnerable to Command Injection and Buffer overflow in github.com/neuvector/neuvector Unknown 11 months ago 8 months ago
uv uv has differential in tar extraction with PAX headers Low Risk 3.0 11 months ago 8 months ago
uvdesk/community-skeleton Uvdesk remote code execution vulnerability High Risk 8.8 3 years ago 8 months ago
cloudy-uvi-sense-v11 Malicious code in cloudy-uvi-sense-v11 (npm) Unknown 9 months ago 9 months ago
python-uvicorn Malicious code in python-uvicorn (PyPI) Unknown 1 year ago 9 months ago
avangs-olium-niluva Malicious code in avangs-olium-niluva (npm) Unknown 10 months ago 10 months ago
avangs-olium-niluvabi Malicious code in avangs-olium-niluvabi (npm) Unknown 10 months ago 10 months ago