Lucene search
+L

8989 matches found

attackerkb
attackerkb
•added 2022/03/25 6:15 p.m.•7 views

CVE-2021-43636

Two Buffer Overflow vulnerabilities exists in T10 V2Firmware V4.1.8cu.5207B20210320 in the httprequestparse function when processing host data in the HTTP request process...

9.8CVSS7.3AI score0.01068EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/03/25 12:00 a.m.•14 views

TotoLink T10 安全漏洞

TotoLink T10 is a wireless network system router from TotoLink, Taiwan, China.A security vulnerability exists in the TOTOLINK T10 V2Firmware V4.1.8cu.5207B20210320 version, which stems from a buffer overflow vulnerability in the httprequestparse function. No detailed vulnerability details are...

9.8CVSS5.9AI score0.01068EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/03/25 12:00 a.m.•3 views

PT-2022-11877

Name of the Vulnerable Software and Affected Versions T10 V2 Firmware version 4.1.8cu.5207 B20210320 Description A buffer overflow issue exists in the http request parse function when processing host data in the HTTP request process. Recommendations For version 4.1.8cu.5207 B20210320, consider...

9.8CVSS6AI score0.01068EPSS
SaveExploits0References3
attackerkb
attackerkb
•added 2022/03/24 10:15 a.m.•12 views

CVE-2022-1061

Heap Buffer Overflow in parseDragons in GitHub repository radareorg/radare2 prior to 5.6.8...

7.5CVSS7.2AI score0.00933EPSS
SaveExploits1References3
OSV
OSV
•added 2022/03/24 10:15 a.m.•11 views

UBUNTU-CVE-2022-1061

Heap Buffer Overflow in parseDragons in GitHub repository radareorg/radare2 prior to 5.6.8...

7.5CVSS7.3AI score0.00933EPSS
SaveExploits1References4
Veracode
Veracode
•added 2022/03/23 4:59 a.m.•31 views

Prototype Pollution

simple-plist is vulnerable to prototype pollution. The vulnerability exists because the validations are not handled properly which allows an attacker to inject properties into existing construct prototypes and modify attributes via .parse function...

9.8CVSS4.2AI score0.01326EPSS
SaveExploits1References2Affected Software1
OSV
OSV
•added 2022/03/23 12:00 a.m.•48 views

GHSA-GFF7-G5R8-MG8M Prototype Pollution in simple-plist

simple-plist v1.3.0 was discovered to contain a prototype pollution vulnerability via .parse...

9.8CVSS9.5AI score0.01326EPSS
SaveExploits1References5
attackerkb
attackerkb
•added 2022/03/22 7:15 p.m.•9 views

CVE-2022-26260

Simple-Plist v1.3.0 was discovered to contain a prototype pollution vulnerability via .parse...

9.8CVSS5.9AI score0.01326EPSS
SaveExploits1References2
NVD
NVD
•added 2022/03/22 7:15 p.m.•22 views

CVE-2022-26260

Simple-Plist v1.3.0 was discovered to contain a prototype pollution vulnerability via .parse...

9.8CVSS0.01326EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2022/03/22 6:15 p.m.•30 views

CVE-2022-26260

Simple-Plist v1.3.0 was discovered to contain a prototype pollution vulnerability via .parse...

9.8AI score0.01326EPSS
SaveExploits1References1
CVE
CVE
•added 2022/03/22 6:15 p.m.•131 views

CVE-2022-26260

CVE-2022-26260 affects Simple-Plist v1.3.0. The Red Hat, Veracode, and OSV entries, plus CVE records, confirm a prototype-pollution vulnerability in the library exposed via the .parse() function. Root cause: improper handling during parsing that allows injection of properties into construct proto...

9.8CVSS9.5AI score0.01326EPSS
SaveExploits1References1Affected Software1
Mend
Mend
•added 2022/03/22 6:15 p.m.•4 views

CVE-2022-26260

Simple-Plist v1.3.0 was discovered to contain a prototype pollution vulnerability via .parse...

9.8CVSS0.01326EPSS
SaveExploits1References6
OSV
OSV
•added 2022/03/22 6:15 p.m.•24 views

CVE-2022-26260

Simple-Plist v1.3.0 was discovered to contain a prototype pollution vulnerability via .parse...

7.5AI score
SaveExploits0References3
CNNVD
CNNVD
•added 2022/03/22 12:00 a.m.•19 views

Simple-Plist 安全漏洞

Simple-Plist is a simple API for interacting with binary and plain text Plist data from Joe Wollard, a personal developer in the US. A security vulnerability exists in wollardj Simple-Plist v1.3.0, which stems from a prototype contamination vulnerability in .parse...

9.8CVSS8.2AI score0.01326EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/22 12:00 a.m.•8 views

CVE-2022-26260: Improperly Controlled Modification of Object Prototype Attributes

Simple-Plist v1.3.0 was discovered to contain a prototype pollution vulnerability via .parse...

9.8CVSS8.2AI score0.01326EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/03/22 12:00 a.m.•7 views

PT-2022-17749

Name of the Vulnerable Software and Affected Versions Simple-Plist version 1.3.0 Description The issue is related to a prototype pollution vulnerability. This vulnerability can be exploited via the parse function. Recommendations For Simple-Plist version 1.3.0, consider avoiding the use of the...

9.8CVSS5.8AI score0.01326EPSS
SaveExploits1References8
Positive Technologies
Positive Technologies
•added 2022/03/21 12:00 a.m.•13 views

PT-2022-15865 · Netatalk +4 · Netatalk +4

Name of the Vulnerable Software and Affected Versions: Netatalk affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Netatalk. Authentication is not required to exploit this issue. The specific flaw exists within th...

10CVSS8.3AI score0.86539EPSS
SaveExploits16References99
Positive Technologies
Positive Technologies
•added 2022/03/19 12:00 a.m.•4 views

PT-2022-36880

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-use-after-free error, which occurs when the program attempts to access memory that has already been freed. This error is...

5.8AI score
SaveExploits0References2
attackerkb
attackerkb
•added 2022/03/16 3:15 p.m.•10 views

CVE-2021-39726

In cdParseMsg of cdcodec.c, there is a possible out of bounds read due to an incorrect bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

7.5CVSS6.5AI score0.00755EPSS
SaveExploits0References2
OSV
OSV
•added 2022/03/16 3:15 p.m.•12 views

CVE-2021-39667

In ih264dparsedecodeslice of ih264dparseslice.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10...

6.5CVSS7AI score0.00726EPSS
SaveExploits0References1
Rows per page
Query Builder