39 matches found
CVE-2022-21231
All versions of package deep-get-set are vulnerable to Prototype Pollution via the 'deep' function. Note: This vulnerability derives from an incomplete fix of CVE-2020-7715...
Design/Logic Flaw
All versions of package deep-get-set are vulnerable to Prototype Pollution via the 'deep' function. Note: This vulnerability derives from an incomplete fix of CVE-2020-7715...
moleculer-rabbitmq-extend-delay (1.1.12) potentially affected by CVE-2020-7715 +1 more via deep-get-set (1.1.1)
deep-get-set NPM version 1.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on deep-get-set and may be impacted: - moleculer-rabbitmq-extend-delay 1.1.12 Source cves: CVE-2020-7715, CVE-2022-21231 Source advisory: SNYK:JS-DEEPGETSET-2342655...
CVE-2020-7715
All versions of package deep-get-set are vulnerable to Prototype Pollution via the main function...
CVE-2020-7715
CVE-2020-7715 affects the npm package deep-get-set . The vulnerability is a prototype pollution flaw in the main function, arising from an incomplete fix, allowing an attacker to pollute Object.prototype (e.g., via the key path "proto " or related paths). Affected versions are those before the re...
CVE-2019-7715
CVE-2019-7715 affects Green Hills INTEGRITY RTOS 5.0.4 via the Interpeak IPCOMShell TELNET server. The main shell handler uses the environment variable ipcom.shell.greeting as the first argument to printf(), making it possible for an attacker to supply a user-controlled format string during login...
CVE-2018-7715
CVE-2018-7715 affects PrivateVPN 2.0.31 for macOS via the com.privat.vpn.helper XPC service. The XPC interface allows arbitrary installed apps to connect and send a message containing a path string intended to point to PrivateVPN’s internal openvpn binary. If no connection has been established ye...
CVE-2018-7715
PrivateVPN 2.0.31 for macOS suffers from a root privilege escalation vulnerability with its com.privat.vpn.helper privileged helper tool. This privileged helper tool implements an XPC service that allows arbitrary installed applications to connect and send messages. The XPC service extracts the...
CVE-2015-7715
Cross-site request forgery CSRF vulnerability in the Realtyna RPL comrpl component before 8.9.5 for Joomla! allows remote attackers to hijack the authentication of administrators for requests that add a user via an adduser action to administrator/index.php...
CVE-2015-7715
The CVE covers a CSRF vulnerability in Realtyna RPL (com_rpl) for Joomla!, affecting versions prior to 8.9.5. The issue allows an attacker to hijack an administrator’s session by triggering an add_user action via administrator/index.php, enabling remote user creation without proper authorization....
CVE-2016-7715
CVE-2016-7715 is rejected/not used and does not represent an active vulnerability entry.
ucl.ac.uk XSS vulnerability
Vulnerable URL: http://www.ucl.ac.uk/ldlr/Current/search.php?selectdb=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 21:41 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Ale...
Realtyna RPL 8.9.2 CSRF / Cross Site Scripting
Realtyna RPL 8.9.2 Joomla Extension Persistent XSS And CSRF Vulnerabilities Vendor: Realtyna LLC Product web page: https://www.realtyna.com Affected version: 8.9.2 Summary: Realtyna CRM Client Relationship Management Add-on for RPL is a Real Estate CRM specially designed and developed based on...
CVE-2015-7715
creationtimestamp| type| source ---|---|--- 2015-10-23 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/38528...
Joomla! Component Realtyna RPL 8.9.2 - Persistent Cross-Site Scripting / Cross-Site Request Forgery
Realtyna RPL 8.9.2 Joomla Extension Persistent XSS And CSRF Vulnerabilities Vendor: Realtyna LLC Product web page: https://www.realtyna.com Affected version: 8.9.2 Summary: Realtyna CRM Client Relationship Management Add-on for RPL is a Real Estate CRM specially designed and developed based on...
Realtyna RPL 8.9.2 Joomla Extension Multiple SQL Injection Vulnerabilities
Summary Realtyna CRM Client Relationship Management Add-on for RPL is a Real Estate CRM specially designed and developed based on business process and models required by Real Estate Agents/Brokers. Realtyna CRM intends to increase the Conversion Ratio of the website Visitors to Leads and then Lea...
Realtyna RPL 8.9.2 Joomla Extension Persistent XSS And CSRF Vulnerabilities
Summary Realtyna CRM Client Relationship Management Add-on for RPL is a Real Estate CRM specially designed and developed based on business process and models required by Real Estate Agents/Brokers. Realtyna CRM intends to increase the Conversion Ratio of the website Visitors to Leads and then Lea...
CVE-2014-7715
The CVE-2014-7715 entry concerns the Android application GIGA HOBBY (package com.innopage.store.gigahobby) version 1.0.6. Affected component: SSL/TLS certificate validation in the app’s network trust configuration is absent: the app does not verify X.509 certificates from SSL servers. Root cause:...