13401 matches found
CVE-2024-39003
Amoyjs amoy common v1.0.10 contains a prototype pollution flaw in the setValue function. The issue can enable attackers to inject arbitrary properties, leading to arbitrary code execution or Denial of Service (DoS). Reported by multiple sources (Veracode, Red Hat, CVEs), the vulnerability is link...
amoy common Security Vulnerabilities
amoy common is a library in amoyjs open source. A security vulnerability exists in amoy common v1.0.10, which stems from prototype contamination via the function setValue, allowing an attacker to execute arbitrary code or cause a denial of service DoS by injecting arbitrary properties...
CVE-2024-38990
Tada5hi sp-common v0.5.4 was discovered to contain a prototype pollution via the function mergeDeep. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...
PT-2024-28319 · Amoyjs · Amoyjs
Name of the Vulnerable Software and Affected Versions: amoyjs amoy common version 1.0.10 Description: The issue is related to a prototype pollution vulnerability via the setValue function. This allows attackers to execute arbitrary code or cause a Denial of Service DoS by injecting arbitrary...
amoy common Security Vulnerabilities
amoy common is an amoyjs open source library. A security vulnerability exists in amoy common v1.0.10, which stems from a prototype contamination via the function extend that allows an attacker to execute arbitrary code or cause a denial of service DoS by injecting arbitrary attributes...
PT-2024-28306 · Tada5Hi · Sp-Common
Name of the Vulnerable Software and Affected Versions: Tada5hi sp-common version 0.5.4 Description: The issue allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties through a prototype pollution vulnerability in the mergeDeep function...
CVE-2024-38994
amoyjs amoy common v1.0.10 was discovered to contain a prototype pollution via the function extend. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...
Android Security Bulletin—July 2024Stay organized with collectionsSave and categorize content based on your preferences.
The Android Security Bulletin contains details of security vulnerabilities affecting Android devices. Security patch levels of 2024-07-05 or later address all of these issues. To learn how to check a device's security patch level, see Check and update your Android version. Android partners are...
CVE-2024-38990
CVE-2024-38990 affects Tada5hi sp-common v0.5.4. The issue is a prototype pollution in the mergeDeep function that allows an attacker to inject arbitrary properties, potentially leading to arbitrary code execution or a DoS. CVSS v3.1 base score 6.3 (Network attack, low privileges, no user interac...
Debian: Security Advisory (DSA-5717-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PUB-A-318386861
Bulletin has no description...
Improper Certificate Validation
Overview Affected versions of this package are vulnerable to Improper Certificate Validation due to improper certificate validation. An attacker can intercept secure communications by presenting a forged certificate. Remediation Upgrade github.com/mongodb/mongo-tools/common/db to version 3.6.21,...
Malicious code in Blockсore.IntegratioոTests.Common (NuGet)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-4338 Malicious code in Blockсore.IntеgrаtioոTests.Common (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in Blockсore.IntеgrаtioոTests.Common (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in Bloсkcore.Tests.Commoո (NuGet)
--- -= Per source details. Do not edit below this line.=-...
Malicious code in Bloсkcorе.Tests.Commоո (NuGet)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-3251 Malicious code in u-workflow.module.common.project-config (npm)
--- -= Per source details. Do not edit below this line.=-...