15002 matches found
CVE-2025-54520
Improper Protection Against Voltage and Clock Glitches in FPGA devices, could allow an attacker with physical access to undervolt the platform resulting in a loss of confidentiality...
toggle-array vulnerable to prototype pollution
toggle-array is a package designed to enables a property on the object at the specified index, while disabling the property on all other objects. A Prototype Pollution vulnerability in the enable and disable function of toggle-array v1.0.1 and before allows attackers to inject properties on...
Prototype Pollution
Overview toggle-array is an In an array of objects, this enables a property on the object at the specified index, while disabling the property on all other objects. Affected versions of this package are vulnerable to Prototype Pollution via the enable and disable functions. An attacker can modify...
4d-oled (>=1.0.0, <=1.0.2), @abb92/holidates (>=1.0.0, <=1.0.1) +920 more potentially affected by CVE-2025-57328 via toggle-array (1.0.1)
toggle-array NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on toggle-array and may be impacted: - 4d-oled =1.0.0, =1.0.0, =5.0.0, =4.0.2, =0.0.0-snapshot-ZERO-3343-20250425065225, =0.8.1-beta.2, =0.1.0, =0.1.1-a, =0.1.0, =1.0.0, =1.0.0...
4d-oled (>=1.0.0, <=1.0.2), @abb92/holidates (>=1.0.0, <=1.0.1) +968 more potentially affected by CVE-2025-57328 via toggle-array (>=0.1.0, <=1.0.1)
toggle-array NPM version =0.1.0, =1.0.0, =1.0.0, =5.0.0, =4.0.2, =0.0.0-snapshot-ZERO-3343-20250425065225, =0.8.1-beta.2, =0.1.0, =0.1.1-a, =1.0.0, =0.1.0, =1.0.0, =1.0.0, =1.11.0 and more Source cves: CVE-2025-57328 Source advisory: SNYK:JS-TOGGLEARRAY-13110016...
4d-oled (>=1.0.0, <=1.0.2), @abb92/holidates (>=1.0.0, <=1.0.1) +920 more potentially affected by CVE-2025-57328 via toggle-array (1.0.1)
toggle-array NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on toggle-array and may be impacted: - 4d-oled =1.0.0, =1.0.0, =5.0.0, =4.0.2, =0.0.0-snapshot-ZERO-3343-20250425065225, =0.8.1-beta.2, =0.1.0, =0.1.1-a, =0.1.0, =1.0.0, =1.0.0...
GHSA-34Q3-8X9V-J957 toggle-array vulnerable to prototype pollution
toggle-array is a package designed to enables a property on the object at the specified index, while disabling the property on all other objects. A Prototype Pollution vulnerability in the enable and disable function of toggle-array v1.0.1 and before allows attackers to inject properties on...
CVE-2025-54520
Improper Protection Against Voltage and Clock Glitches in FPGA devices, could allow an attacker with physical access to undervolt the platform resulting in a loss of confidentiality...
CVE-2025-57328
toggle-array is a package designed to enables a property on the object at the specified index, while disabling the property on all other objects. A Prototype Pollution vulnerability in the enable and disable function of toggle-array v1.0.1 and before allows attackers to inject properties on...
CVE-2025-27034 Improper Validation of Array Index in Multi-Mode Call Processor
Memory corruption while selecting the PLMN from SOR failed list...
CVE-2025-27034
CVE-2025-27034 affects Qualcomm Multi-Mode Call Processor (Qualcomm Snapdragon devices) with memory corruption when selecting the PLMN from the SOR failed list. The root cause is an unchecked array indexing in the firmware, enabling potential remote code execution. Connected sources specify the v...
CVE-2025-27034 Improper Validation of Array Index in Multi-Mode Call Processor
Memory corruption while selecting the PLMN from SOR failed list...
CVE-2025-23274
NVIDIA nvJPEG contains a vulnerability in jpeg encoding where a user may cause an out-of-bounds read by providing a maliciously crafted input image with dimensions that cause integer overflows in array index calculations. A successful exploit of this vulnerability may lead to denial of service...
CLSA-2025-1758705181 glib2: Fix of CVE-2020-35457
CVE-2020-35457: fix integer overflow in goptiongroupaddentries to prevent potential out-of-bounds write - Bug775510: avoid calling Standard C string/array functions with NULL arguments...
CVE-2025-57328
toggle-array is a package designed to enables a property on the object at the specified index, while disabling the property on all other objects. A Prototype Pollution vulnerability in the enable and disable function of toggle-array v1.0.1 and before allows attackers to inject properties on...
CVE-2025-57328
toggle-array is a package designed to enables a property on the object at the specified index, while disabling the property on all other objects. A Prototype Pollution vulnerability in the enable and disable function of toggle-array v1.0.1 and before allows attackers to inject properties on...
CVE-2025-57328
The toggle-array package (versions v1.0.1 and before) is vulnerable to a Prototype Pollution vulnerability within its enable and disable functions. This issue stems from improper input validation, allowing an attacker to supply a crafted payload to inject properties into Object.prototype . Such p...
CVE-2025-57328
toggle-array is a package designed to enables a property on the object at the specified index, while disabling the property on all other objects. A Prototype Pollution vulnerability in the enable and disable function of toggle-array v1.0.1 and before allows attackers to inject properties on...
CVE-2025-57328
toggle-array is a package designed to enables a property on the object at the specified index, while disabling the property on all other objects. A Prototype Pollution vulnerability in the enable and disable function of toggle-array v1.0.1 and before allows attackers to inject properties on...
NVIDIA nvdisasm symbol table parsing improper array index validation vulnerability
Talos Vulnerability Report TALOS-2025-2169 NVIDIA nvdisasm symbol table parsing improper array index validation vulnerability September 24, 2025 CVE Number CVE-2025-23338 SUMMARY An improper array index validation vulnerability exists in the symbol table parsing functionality of NVIDIA nvdisasm...