Skip to main content

App

3 CVEs product

Monthly

CVE-2023-50728 npm HIGH PATCH This Week

octokit/webhooks is a GitHub webhook events toolset for Node.js. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Node.js Information Disclosure App Octokit Webhooks +1
NVD GitHub
CVSS 3.1
7.5
EPSS
0.7%
CVE-2018-13661 HIGH POC This Week

The mintToken function of a smart contract implementation for APP, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Integer Overflow Buffer Overflow App
NVD GitHub
CVSS 3.0
7.5
EPSS
1.1%
CVE-2012-6141 HIGH This Week

The App::Context module 0.01 through 0.968 for Perl does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via a crafted request to (1). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Code Injection App
NVD
CVSS 2.0
7.5
EPSS
1.6%
EPSS 1% CVSS 7.5
HIGH PATCH This Week

octokit/webhooks is a GitHub webhook events toolset for Node.js. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Node.js Information Disclosure App +3
NVD GitHub
EPSS 1% CVSS 7.5
HIGH POC This Week

The mintToken function of a smart contract implementation for APP, an Ethereum token, has an integer overflow that allows the owner of the contract to set the balance of an arbitrary user to any. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

Integer Overflow Buffer Overflow App
NVD GitHub
EPSS 2% CVSS 7.5
HIGH This Week

The App::Context module 0.01 through 0.968 for Perl does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via a crafted request to (1). Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

RCE Code Injection App
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy