85 matches found
Moderate: nodejs:12 security and bug fix update
Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The following packages have been upgraded to a later upstream version: nodejs 12.18.4. Security Fixes: nodejs-dot-prop: prototype pollution CVE-2020-8116 nodejs:...
CVE-2020-8116
A prototype pollution flaw was found in nodejs-dot-prop. The function set could be tricked into adding or modifying properties of Object.prototype using any of the constructor, prototype, or proto paths. The highest threat from this vulnerability is to data confidentiality and integrity as well a...
@badgeup/badgeup-ionic-client (>=1.0.1, <=1.0.3), @codedungeon/code-assistant (>=0.0.1, <=0.0.4-dev.53) +42 more potentially affected by CVE-2020-8116 via dot-prop (>=4.0.0, <=4.2.0)
dot-prop NPM version =4.0.0, =1.0.1, =0.0.1, =0.0.1-dev.9, =0.0.3, =0.0.4, =1.1.0, =1.0.0-alpha.5, =0.10.1, =3.0.0, =1.0.0-beta.1, =0.1.12, =1.0.0, =1.0.2 - falcor-array 0.0.1 - flipcache 0.0.1 and more Source cves: CVE-2020-8116 Source advisory: OSV:GHSA-FF7X-QRG7-QGGM...
@bara/barn (>=2.2.0, <=2.5.0), @ezs/istex (1.4.7) +25 more potentially affected by CVE-2020-8116 via dot-prop (>=5.0.0, <=5.1.0)
dot-prop NPM version =5.0.0, =2.2.0, =1.1.3, =2.1.9, =12.0.0, =0.0.0, =1.2.5, =1.0.0-rc.2, =1.0.0, =0.4.2, =0.1.6, =0.0.31, =2.2.0, =1.3.0, =3.1.1 and more Source cves: CVE-2020-8116 Source advisory: OSV:GHSA-FF7X-QRG7-QGGM...
@badgeup/badgeup-ionic-client (>=1.0.1, <=1.0.3), @codedungeon/code-assistant (>=0.0.1, <=0.0.4-dev.53) +42 more potentially affected by CVE-2020-8116 via dot-prop (>=4.0.0, <=4.2.0)
dot-prop NPM version =4.0.0, =1.0.1, =0.0.1, =0.0.1-dev.9, =0.0.3, =0.0.4, =1.1.0, =1.0.0-alpha.5, =0.10.1, =3.0.0, =1.0.0-beta.1, =0.1.12, =1.0.0, =1.0.2 - falcor-array 0.0.1 - flipcache 0.0.1 and more Source cves: CVE-2020-8116 Source advisory: GHSA-FF7X-QRG7-QGGM...
@bara/barn (>=2.2.0, <=2.5.0), @ezs/istex (1.4.7) +25 more potentially affected by CVE-2020-8116 via dot-prop (>=5.0.0, <=5.1.0)
dot-prop NPM version =5.0.0, =2.2.0, =1.1.3, =2.1.9, =12.0.0, =0.0.0, =1.2.5, =1.0.0-rc.2, =1.0.0, =0.4.2, =0.1.6, =0.0.31, =2.2.0, =1.3.0, =3.1.1 and more Source cves: CVE-2020-8116 Source advisory: GHSA-FF7X-QRG7-QGGM...
Code injection
An issue was discovered on Samsung mobile devices with KK4.4, L5.0/5.1, M6.0, and N7.0 software. Because of incorrect exception handling and an unprotected intent, AudioService can cause a system crash, The Samsung IDs are SVE-2017-8114, SVE-2017-8116, and SVE-2017-8117 March 2017...
CVE-2017-18682
An issue was discovered on Samsung mobile devices with KK4.4, L5.0/5.1, M6.0, and N7.0 software. Because of incorrect exception handling and an unprotected intent, AudioService can cause a system crash, The Samsung IDs are SVE-2017-8114, SVE-2017-8116, and SVE-2017-8117 March 2017...
CVE-2020-8116
Prototype pollution vulnerability in dot-prop npm package versions before 4.2.1 and versions 5.x before 5.1.1 allows an attacker to add arbitrary properties to JavaScript language constructs such as objects...
CVE-2020-8116
Prototype pollution vulnerability in dot-prop npm package versions before 4.2.1 and versions 5.x before 5.1.1 allows an attacker to add arbitrary properties to JavaScript language constructs such as objects...
CVE-2020-8116
Prototype pollution vulnerability in dot-prop npm package versions before 4.2.1 and versions 5.x before 5.1.1 allows an attacker to add arbitrary properties to JavaScript language constructs such as objects...
CVE-2020-8116
Prototype pollution vulnerability in dot-prop npm package versions before 4.2.1 and versions 5.x before 5.1.1 allows an attacker to add arbitrary properties to JavaScript language constructs such as objects...
CVE-2020-8116
CVE-2020-8116: Prototype pollution in the dot-prop npm package. Affected versions are dot-prop before 4.2.1 and 5.x before 5.1.1, which can allow an attacker to add arbitrary properties to JavaScript language constructs. The vulnerability is listed among multiple issues in MiracleLinux AXSA advis...
CVE-2020-8116
Prototype pollution vulnerability in dot-prop npm package versions before 4.2.1 and versions 5.x before 5.1.1 allows an attacker to add arbitrary properties to JavaScript language constructs such as objects...
1n1t (>=1.0.1, <=1.0.25), 33-multi-async-task-queue (>=0.0.1-alpha.1, <=2.0.1-alpha.102525185) +4599 more potentially affected by CVE-2020-8116 via dot-prop (>=1.0.1, <=4.2.0)
dot-prop NPM version =1.0.1, =1.0.1, =0.0.1-alpha.1, =0.0.2, =0.3.0, =0.1.0, =0.1.0, =0.4.0, =0.1.0, =0.0.1, =2.1.3-upgradeCommitlint.1, =0.1.2, =0.2.0 and more Source cves: CVE-2020-8116 Source advisory: MEND:CVE-2020-8116...
@bara/barn (>=2.2.0, <=2.5.0), @ezs/istex (1.4.7) +25 more potentially affected by CVE-2020-8116 via dot-prop (>=5.0.0, <=5.1.0)
dot-prop NPM version =5.0.0, =2.2.0, =1.1.3, =2.1.9, =12.0.0, =0.0.0, =1.2.5, =1.0.0-rc.2, =1.0.0, =0.4.2, =0.1.6, =0.0.31, =2.2.0, =1.3.0, =3.1.1 and more Source cves: CVE-2020-8116 Source advisory: MEND:CVE-2020-8116...
CVE-2019-8116
CVE-2019-8116 is an insecure authentication and session management vulnerability in Magento. Affected products: Magento 2.2 before 2.2.10 and Magento 2.3 before 2.3.3 (or 2.3.2-p1). An unauthenticated user can leverage a guest session ID after login to access the customer account index page. This...
Prototype Pollution
Overview Versions of dot-prop before 4.2.1 or 5.1.1 are vulnerable to prototype pollution. The function set does not restrict the modification of an Object's prototype, which may allow an attacker to add or modify an existing property that will exist on all objects. Recommendation Upgrade to...
Security Bulletin: Multiple vulnerabilities in file affect IBM Security Network Protection
Summary There are multiple vulnerabilities in file that is used by IBM Security Network Protection. These vulnerabilities include CVE-2014-3538, CVE-2014-3587, CVE-2014-3710, CVE-2014-8116, CVE-2014-8117, CVE-2014-9620, and CVE-2014-9653. Vulnerability Details CVEID: CVE-2014-3538 DESCRIPTION: Fi...