Lucene search
+L

5926 matches found

OSV
OSV
•added 2020/08/14 3:15 p.m.•36 views

CVE-2020-7701

madlib-object-utils before 0.1.7 is vulnerable to Prototype Pollution via setValue...

9.8CVSS6.6AI score
SaveExploits0References1
Prion
Prion
•added 2020/08/14 3:15 p.m.•22 views

Code injection

madlib-object-utils before 0.1.7 is vulnerable to Prototype Pollution via setValue...

7.5CVSS7.5AI score0.02055EPSS
SaveExploits1References1Affected Software1
attackerkb
attackerkb
•added 2020/08/14 3:15 p.m.•9 views

CVE-2020-7701

madlib-object-utils before 0.1.7 is vulnerable to Prototype Pollution via setValue...

9.8CVSS8.2AI score0.02055EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2020/08/14 3:10 p.m.•54 views

CVE-2020-7701 Prototype Pollution

madlib-object-utils before 0.1.7 is vulnerable to Prototype Pollution via setValue...

9.8CVSS8.6AI score0.02055EPSS
SaveExploits1References1
CVE
CVE
•added 2020/08/14 3:10 p.m.•68 views

CVE-2020-7701

CVE-2020-7701 and CVE-2022-24279 involve Prototype Pollution in madlib-object-utils prior to 0.1.8 via the setValue method. Affected: madlib-object-utils

9.8CVSS8.4AI score0.02055EPSS
SaveExploits1References1Affected Software1
Mend
Mend
•added 2020/08/14 3:10 p.m.•2 views

CVE-2020-7701

madlib-object-utils before 0.1.7 is vulnerable to Prototype Pollution via setValue...

9.8CVSS0.02055EPSS
SaveExploits1References2
Snyk
Snyk
•added 2020/08/14 10:30 a.m.•16 views

Prototype Pollution

Overview nodee-utils is a set of useful helpers Affected versions of this package are vulnerable to Prototype Pollution via the deepSet function. POC: const object = require'nodee-utils'; object.deepSet, 'proto.polluted', true; console.logpolluted; Details Prototype Pollution is a vulnerability...

9.8CVSS9AI score0.01916EPSS
SaveExploits1References2
Snyk
Snyk
•added 2020/08/14 10:15 a.m.•8 views

Prototype Pollution

Overview madlib-object-utils is an A small set of utility functions for working with objects Affected versions of this package are vulnerable to Prototype Pollution via setValue. POC: const objectUtils = require"madlib-object-utils"; objectUtils.setValue'proto.polluted', , true;...

9.8CVSS6.8AI score0.02055EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2020/08/14 12:00 a.m.•14 views

PT-2020-19724 · Madlib · Madlib-Object-Utils

Name of the Vulnerable Software and Affected Versions: madlib-object-utils versions prior to 0.1.7 Description: The issue allows for Prototype Pollution via the setValue function. Recommendations: For versions prior to 0.1.7, update to version 0.1.7 or later to resolve the issue...

9.8CVSS8.5AI score0.02055EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/08/14 12:00 a.m.•3 views

CVE-2020-7701: Improperly Controlled Modification of Object Prototype Attributes

madlib-object-utils before 0.1.7 is vulnerable to Prototype Pollution via setValue...

9.8CVSS7.3AI score0.02055EPSS
SaveExploits1References2
OpenVAS
OpenVAS
•added 2020/07/22 12:00 a.m.•19 views

Fedora: Security Advisory for targetcli (FEDORA-2020-83d2616f81)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

5.5CVSS5.8AI score0.00335EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2020/07/16 12:00 a.m.•17 views

PT-2020-6831 · Unknown +5 · Cifs-Utils +5

Name of the Vulnerable Software and Affected Versions: cifs-utils affected versions not specified Description: The issue is related to the mount.cifs command in cifs-utils, which invokes a shell when requesting the Samba password. This could allow an attacker to inject arbitrary commands,...

10CVSS6.8AI score0.77656EPSS
SaveExploits56References83
CNVD
CNVD
•added 2020/07/14 12:00 a.m.•15 views

ViaBTC Exchange Server Digital Error Vulnerability

ViaBTC Exchange Server is a backend engine dedicated to cryptocurrency trading. An integer overflow vulnerability exists in the utils/utwssvr.c file in versions of ViaBTC Exchange Server prior to 2018-08-21. An attacker could exploit this vulnerability to cause memory corruption...

7AI score
SaveExploits0References1
OpenVAS
OpenVAS
•added 2020/07/03 12:00 a.m.•31 views

Huawei EulerOS: Security Advisory for shadow-utils (EulerOS-SA-2020-1759)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS6.2AI score0.00409EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2020/07/02 7:21 p.m.•39 views

CVE-2020-15503

LibRaw before 0.20-RC1 lacks a thumbnail size range check. This affects decoders/unpackthumb.cpp, postprocessing/memimage.cpp, and utils/thumbutils.cpp. For example, mallocsizeoflibrawprocessedimaget+T.tlength occurs without validating T.tlength...

5CVSS3.6AI score0.03672EPSS
SaveExploits0References3
NVD
NVD
•added 2020/07/02 2:15 p.m.•25 views

CVE-2020-15503

LibRaw before 0.20-RC1 lacks a thumbnail size range check. This affects decoders/unpackthumb.cpp, postprocessing/memimage.cpp, and utils/thumbutils.cpp. For example, mallocsizeoflibrawprocessedimaget+T.tlength occurs without validating T.tlength...

7.5CVSS0.03672EPSS
SaveExploits0References12
OSV
OSV
•added 2020/07/02 2:15 p.m.•36 views

CVE-2020-15503

LibRaw before 0.20-RC1 lacks a thumbnail size range check. This affects decoders/unpackthumb.cpp, postprocessing/memimage.cpp, and utils/thumbutils.cpp. For example, mallocsizeoflibrawprocessedimaget+T.tlength occurs without validating T.tlength...

7.5CVSS6.6AI score
SaveExploits0References12
Prion
Prion
•added 2020/07/02 2:15 p.m.•33 views

Code injection

LibRaw before 0.20-RC1 lacks a thumbnail size range check. This affects decoders/unpackthumb.cpp, postprocessing/memimage.cpp, and utils/thumbutils.cpp. For example, mallocsizeoflibrawprocessedimaget+T.tlength occurs without validating T.tlength...

5CVSS8.3AI score0.03672EPSS
SaveExploits0References12Affected Software3
UbuntuCve
UbuntuCve
•added 2020/07/02 2:15 p.m.•35 views

CVE-2020-15503

LibRaw before 0.20-RC1 lacks a thumbnail size range check. This affects decoders/unpackthumb.cpp, postprocessing/memimage.cpp, and utils/thumbutils.cpp. For example, mallocsizeoflibrawprocessedimaget+T.tlength occurs without validating T.tlength...

7.5CVSS6.8AI score0.03672EPSS
SaveExploits0References4
Debian CVE
Debian CVE
•added 2020/07/02 12:00 a.m.•36 views

CVE-2020-15503

LibRaw before 0.20-RC1 lacks a thumbnail size range check. This affects decoders/unpackthumb.cpp, postprocessing/memimage.cpp, and utils/thumbutils.cpp. For example, mallocsizeoflibrawprocessedimaget+T.tlength occurs without validating T.tlength...

7.5CVSS6.8AI score0.03672EPSS
SaveExploits0
Rows per page
Query Builder