253 matches found
nodejs-dot-prop: prototype pollution
A prototype pollution flaw was found in nodejs-dot-prop. The function set could be tricked into adding or modifying properties of Object.prototype using any of the constructor, prototype, or proto paths. The highest threat from this vulnerability is to data confidentiality and integrity as well a...
CVE-2020-7737
All versions of package safetydance are vulnerable to Prototype Pollution via the set function...
CVE-2020-7736
The package bmoor before 0.8.12 are vulnerable to Prototype Pollution via the set function...
CVE-2020-7737 Prototype Pollution
All versions of package safetydance are vulnerable to Prototype Pollution via the set function...
CVE-2020-7737
All versions of package safetydance are vulnerable to Prototype Pollution via the set function...
CVE-2020-7737
All versions of package safetydance are vulnerable to Prototype Pollution via the set function...
CVE-2020-7736 Prototype Pollution
The package bmoor before 0.8.12 are vulnerable to Prototype Pollution via the set function...
CVE-2020-7736
The package bmoor before 0.8.12 are vulnerable to Prototype Pollution via the set function...
CVE-2020-7736
The package bmoor before 0.8.12 are vulnerable to Prototype Pollution via the set function...
PT-2020-19754 · Unknown · Safetydance
Name of the Vulnerable Software and Affected Versions: safetydance versions all Description: The issue concerns Prototype Pollution via the set function. This affects all versions of the package, allowing for potential manipulation of object properties. Recommendations: For all versions, consider...
PT-2020-19753 · Bmoor · Bmoor
Name of the Vulnerable Software and Affected Versions: bmoor versions prior to 0.8.12 Description: The issue concerns Prototype Pollution via the set function. Recommendations: For versions prior to 0.8.12, update to version 0.8.12 or later to resolve the issue...
CVE-2020-7737: Improperly Controlled Modification of Object Prototype Attributes
All versions of package safetydance are vulnerable to Prototype Pollution via the set function...
CVE-2020-7736: Improperly Controlled Modification of Object Prototype Attributes
The package bmoor before 0.8.12 are vulnerable to Prototype Pollution via the set function...
Prototype Pollution
keyd is vulnerable to prototype pollution. The vulnerability exists as it does not prevent the proto property to be set when the set function is called...
PT-2020-21240
Name of the Vulnerable Software and Affected Versions get-setter versions affected versions not specified Description The issue concerns prototype pollution. The set function does not restrict the modification of an Object's prototype, which may allow an attacker to add or modify an existing...
PT-2020-21455
Name of the Vulnerable Software and Affected Versions reggae versions affected versions not specified Description The issue concerns prototype pollution. The function set does not restrict the modification of an Object's prototype, which may allow a malicious actor to add or modify an existing...
Prototype Pollution
gedi is vulnerable to prototype pollution. The vulnerability exists as it does not restrict the proto header to be set through the set function...
Prototype Pollution
deeps is vulnerable to prototype pollution. The vulnerability exists as it does not restrict the proto header to be set through the set function...