set-value 安全漏洞

🗓️ 12 Sep 2021 00:00:00Reported by China National Vulnerability Database of Information SecurityType

cnnvd

cnnvd🔗 www.cnnvd.org.cn👁 1 Views

Security vulnerability in set-value causes type confusion and CVE-2019-10747 bypass when path key is an array.

Reporter	Title	Published	Views	Family All 39
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery for IBM Cloud Pak for Data affected by vulnerability in Node.js	30 Nov 202116:26	–	ibm
IBM Security Bulletins	Security Bulletin: QRadar Deployment Intelligence App for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities (CVE-2022-25881, CVE-2021-23440, CVE-2022-24785, CVE-2022-46175)	6 Jun 202320:02	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in module set-value affects IBM Db2 Big SQL on Cloud Pak for Data	23 Dec 202514:42	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container Dashboards may be vulnerable to arbitrary code execution via CVE-2021-23440	20 Sep 202111:31	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Machine Learning Accelerator on Cloud Pak for Data is vulnerable to multiple vulnerabilities	12 Dec 202317:28	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities fixed in Cloud Pak for Automation components	19 Jan 202216:26	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities found with third-party libraries used by IBM® MobileFirst Platform	17 Feb 202315:44	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in React, webpack and Node.js modules affect Tivoli Netcool/OMNIbus WebGUI	6 Oct 202204:09	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar User Behavior Analytics is vulnerable to components with known vulnerabilities	31 Aug 202310:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Fusion and IBM Storage Fusion HCI may vulnerable to denial of service, spoofing attacks via dependent JavaScript libraries (CVE-2021-23440, CVE-2018-25031, CVE-2022-46175, CVE-2022-37599, CVE-2022-37603)	29 Aug 202321:45	–	ibm

Source	Link
github	www.github.com/jonschlinkert/set-value/pull/33
oracle	www.oracle.com/security-alerts/cpujan2022.html
snyk	www.snyk.io/vuln/SNYK-JAVA-ORGWEBJARSNPM-1584212
github	www.github.com/jonschlinkert/set-value/commit/7cf8073bb06bf0c15e08475f9f952823b4576452
snyk	www.snyk.io/vuln/SNYK-JS-SETVALUE-1540541
huntr	www.huntr.dev/bounties/2eae1159-01de-4f82-a177-7478a408c4a2/
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2022012755
ibm	www.ibm.com/support/pages/node/6490861
auscert	www.auscert.org.au/bulletins/ESB-2021.4172
auscert	www.auscert.org.au/bulletins/ESB-2023.3324

23 May 2026 00:00Current

7.9High risk

Vulners AI Score7.9

CVSS 27.5

CVSS 3.17.3 - 9.8

EPSS0.00071

set-value vulnerability type confusion CVE-2019-10747 path key array cnnvd