141 matches found
-fides-amor-et-lux (1.0.0), -graphql-codegen-client-preset-swc-test (>=2.0.1, <=2.0.2) +50272 more potentially affected by CVE-2025-13465 +1 more via lodash (>=4.0.0, <=4.18.0)
lodash NPM version =4.0.0, =2.0.1, =1.0.49, =0.0.8, =0.2.0, =0.0.1, =1.0.0, =0.0.1, =2.3.0, =1.0.0, =1.0.0, =1.0.1 and more Source cves: CVE-2025-13465, CVE-2026-2950 Source advisory: SNYK:JS-LODASH-15869619...
4game-support-ckeditor5-custom-build (>=0.0.1, <=0.0.5), 87-midnight-ckeditor5 (>=0.0.3, <=0.0.5) +5716 more potentially affected by CVE-2025-13465 +1 more via lodash-es (>=4.0.0, <=4.18.0)
lodash-es NPM version =4.0.0, =0.0.1, =0.0.3, =0.0.1, =0.0.1-alpha.23, =1.0.0, =1.0.0, =2.14.1, =41.3.1, =2.1.0, =0.3.4, =0.4.5, =0.3.5, =0.3.5, =0.3.5, =0.3.5, =0.5.0 and more Source cves: CVE-2025-13465, CVE-2026-2950 Source advisory: SNYK:JS-LODASHES-15869621...
@dojo/cli-test-intern (>=0.1.0, <=2.0.0-beta3.1), express_mvc (>=4.1.1, <=4.3.10) +7 more potentially affected by CVE-2025-13465 +1 more via lodash-amd (>=4.16.4, <=4.17.23)
lodash-amd NPM version =4.16.4, =0.1.0, =4.1.1, =3.4.0, =0.0.1, =1.0.14, =0.0.7, =0.0.1, =0.1.5 - xirtam--matrix-operations 0.1.3 Source cves: CVE-2025-13465, CVE-2026-2950 Source advisory: SNYK:JS-LODASHAMD-15869622...
@akashic/akashic-cli (>=2.16.49, <=2.17.21), @akashic/akashic-cli-export (>=1.8.28, <=1.9.17) +251 more potentially affected by CVE-2025-13465 +1 more via lodash.unset (>=4.0.2, <=4.5.2)
lodash.unset NPM version =4.0.2, =2.16.49, =1.8.28, =1.2.1, =1.8.4, =8.0.0, =1.0.75, =0.0.2, =0.1.0, =1.31.9, =0.0.4, =0.6.0 and more Source cves: CVE-2025-13465, CVE-2026-2950 Source advisory: SNYK:JS-LODASHUNSET-15869620...
CVE-2026-2950 lodash vulnerable to Prototype Pollution via array path bypass in `_.unset` and `_.omit`
The .unset and .omit functions in Lodash are vulnerable to prototype pollution. The fix for CVE-2025-13465 only guards against string key members, so an attacker can bypass the check by passing array-wrapped path segments. This allows deletion of properties from built-in prototypes such as...
@akashic/akashic-cli (>=2.16.49, <=2.17.21), @akashic/akashic-cli-export (>=1.8.28, <=1.9.17) +251 more potentially affected by CVE-2025-13465 via lodash.unset (>=4.0.2, <=4.5.2)
lodash.unset NPM version =4.0.2, =2.16.49, =1.8.28, =1.2.1, =1.8.4, =8.0.0, =1.0.75, =0.0.2, =0.1.0, =1.31.9, =0.0.4, =0.6.0 and more Source cves: CVE-2025-13465 Source advisory: OSV:GHSA-XXJR-MMJV-4GPG...
4game-support-ckeditor5-custom-build (>=0.0.1, <=0.0.5), 87-midnight-ckeditor5 (>=0.0.3, <=0.0.5) +4583 more potentially affected by CVE-2025-13465 via lodash-es (>=4.0.0, <=4.17.22)
lodash-es NPM version =4.0.0, =0.0.1, =0.0.3, =0.0.1, =0.0.1-alpha.23, =1.0.0, =2.14.1, =41.3.1, =2.1.0, =0.7.0, =1.0.0, =0.1.3, =0.0.4, =0.1.0, =0.0.1-alpha.4, =1.0.1, =1.0.23 and more Source cves: CVE-2025-13465 Source advisory: OSV:GHSA-XXJR-MMJV-4GPG...
EUVD-2026-2950
HCL MyXalytics v6.7 is affected by improper management of a static JWT signing secret in the web application, where the secret lacks rotation , introducing a security risk...
CVE-2023-2950
Improper Authorization in GitHub repository openemr/openemr prior to 7.0.1...
Security Bulletin: IBM i is vulnerable to a host header injection attack due to improper neutralization of HTTP header content by IBM Navigator for i [CVE-2025-2950].
Summary IBM i is vulnerable to a host header injection attack caused by improper neutralization of HTTP header content by IBM Navigator for i as described in the vulnerability details section. This bulletin identifies the steps to take to address the vulnerabilities as described in the...
CVE-2025-2950
creationtimestamp| type| source ---|---|--- 2025-04-18 14:55:33+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3ln3uu6vercs2 2025-04-18 14:59:06+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12458...
CVE-2025-2950 IBM i improper HTTP header neutralization
IBM i 7.3, 7.4, 7.5, and 7.5 is vulnerable to a host header injection attack caused by improper neutralization of HTTP header content by IBM Navigator for i. An authenticated user can manipulate the host header in HTTP requests to change domain/IP address which may lead to unexpected behavior...
RHEL 8 : kernel-rt (RHSA-2024:2950)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:2950 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirement...
WordPress BoldGrid Easy SEO Plugin <= 1.6.14 is vulnerable to Sensitive Data Exposure
Software BoldGrid Easy SEO Type Plugin Vulnerable versions = 1.6.14 Fixed in 1.6.15 OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2024-2950 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 442e3877c2aa Credits Krzysztof Zając Requir...
CVE-2024-2950 BoldGrid Easy SEO – Simple and Effective SEO <= 1.6.14 - Information Exposure
The BoldGrid Easy SEO – Simple and Effective SEO plugin for WordPress is vulnerable to Information Exposure in all versions up to, and including, 1.6.14 via meta information og:description This makes it possible for unauthenticated attackers to view the first 130 characters of a password protecte...
CVE-2023-2950
creationtimestamp| type| source ---|---|--- 2023-05-28 07:29:53+00:00| seen| https://t.me/cibsecurity/64746...
CVE-2023-2950 Improper Authorization in openemr/openemr
Improper Authorization in GitHub repository openemr/openemr prior to 7.0.1...
CVE-2023-2950
CVE-2023-2950 affects OpenEMR prior to 7.0.1 and is tied to improper authorization that enables an HTML-injection vulnerability through the patient portal API. Specifically, the PUT endpoint /openemr/portal/patient/api/onsitedocument/{id} accepts a fullDocument payload; a malicious user can modif...
CVE-2020-2950
creationtimestamp| type| source ---|---|--- 2023-03-13 22:21:06+00:00| seen| https://t.me/CyberSecurityTechnologies/7921 2023-03-14 09:24:23+00:00| published-proof-of-concept| Telegram/5T9p9Zashh8t2QaMEcrWCxGmV69ND6VmH0ET2CJ3Gp-A 2024-09-16 16:00:05+00:00| published-proof-of-concept|...