Lucene search
+L

57 matches found

RedHat Linux
RedHat Linux
•added 2020/07/21 7:32 p.m.•17 views

nodejs-minimist: prototype pollution allows adding or modifying properties of Object.prototype using a constructor or __proto__ payload

A flaw was found in nodejs-minimist, where it was tricked into adding or modifying properties of the Object.prototype using a "constructor" or "proto" payload. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

6.8CVSS7.3AI score0.01931EPSS
SaveExploits2References5
RedHat Linux
RedHat Linux
•added 2020/07/13 10:51 a.m.•15 views

nodejs-minimist: prototype pollution allows adding or modifying properties of Object.prototype using a constructor or __proto__ payload

A flaw was found in nodejs-minimist, where it was tricked into adding or modifying properties of the Object.prototype using a "constructor" or "proto" payload. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

6.8CVSS7.3AI score0.01931EPSS
SaveExploits2References5
RedHat Linux
RedHat Linux
•added 2020/07/07 5:48 p.m.•17 views

nodejs-minimist: prototype pollution allows adding or modifying properties of Object.prototype using a constructor or __proto__ payload

A flaw was found in nodejs-minimist, where it was tricked into adding or modifying properties of the Object.prototype using a "constructor" or "proto" payload. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

6.8CVSS7.3AI score0.01931EPSS
SaveExploits2References5
RedHat Linux
RedHat Linux
•added 2020/07/07 9:27 a.m.•17 views

nodejs-minimist: prototype pollution allows adding or modifying properties of Object.prototype using a constructor or __proto__ payload

A flaw was found in nodejs-minimist, where it was tricked into adding or modifying properties of the Object.prototype using a "constructor" or "proto" payload. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

6.8CVSS7.3AI score0.01931EPSS
SaveExploits2References5
RedHat Linux
RedHat Linux
•added 2020/07/07 9:17 a.m.•18 views

nodejs-minimist: prototype pollution allows adding or modifying properties of Object.prototype using a constructor or __proto__ payload

A flaw was found in nodejs-minimist, where it was tricked into adding or modifying properties of the Object.prototype using a "constructor" or "proto" payload. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

6.8CVSS7.3AI score0.01931EPSS
SaveExploits2References5
RedHat Linux
RedHat Linux
•added 2020/07/07 9:14 a.m.•18 views

nodejs-minimist: prototype pollution allows adding or modifying properties of Object.prototype using a constructor or __proto__ payload

A flaw was found in nodejs-minimist, where it was tricked into adding or modifying properties of the Object.prototype using a "constructor" or "proto" payload. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

6.8CVSS7.3AI score0.01931EPSS
SaveExploits2References5
RedHat Linux
RedHat Linux
•added 2020/06/02 3:34 p.m.•28 views

nodejs-minimist: prototype pollution allows adding or modifying properties of Object.prototype using a constructor or __proto__ payload

A flaw was found in nodejs-minimist, where it was tricked into adding or modifying properties of the Object.prototype using a "constructor" or "proto" payload. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

6.8CVSS7.3AI score0.01931EPSS
SaveExploits2References5
CNVD
CNVD
•added 2020/03/12 12:00 a.m.•26 views

minimist Input Validation Error Vulnerability

minimist is a command line parameter parsing tool. An input validation error vulnerability exists in minimist, which can be exploited by an attacker to add or modify properties of Object.prototype using the "constructor" or "proto" payload...

6.8CVSS8.5AI score0.01931EPSS
SaveExploits2References1
osv_azl
osv_azl
•added 2020/03/11 11:15 p.m.•26 views

AZL-44310 CVE-2020-7598 affecting package nodejs-nodemon 2.0.3-5

minimist before 1.2.2 could be tricked into adding or modifying properties of Object.prototype using a "constructor" or "proto" payload...

5.6CVSS7AI score0.01931EPSS
SaveExploits2References1
osv_ubuntu
osv_ubuntu
•added 2020/03/11 11:15 p.m.•17 views

UBUNTU-CVE-2020-7598

minimist before 1.2.2 could be tricked into adding or modifying properties of Object.prototype using a "constructor" or "proto" payload...

5.6CVSS6.7AI score0.01931EPSS
SaveExploits2References3
attackerkb
attackerkb
•added 2020/03/11 11:15 p.m.•11 views

CVE-2020-7598

minimist before 1.2.2 could be tricked into adding or modifying properties of Object.prototype using a "constructor" or "proto" payload...

6.8CVSS6.9AI score0.01931EPSS
SaveExploits2References3
NVD
NVD
•added 2019/08/23 5:15 p.m.•30 views

CVE-2019-10746

mixin-deep is vulnerable to Prototype Pollution in versions before 1.3.2 and version 2.0.0. The function mixin-deep could be tricked into adding or modifying properties of Object.prototype using a constructor payload...

9.8CVSS9.3AI score0.03651EPSS
SaveExploits1References4
osv_debian
osv_debian
•added 2019/08/23 5:15 p.m.•11 views

DEBIAN-CVE-2019-10746

mixin-deep is vulnerable to Prototype Pollution in versions before 1.3.2 and version 2.0.0. The function mixin-deep could be tricked into adding or modifying properties of Object.prototype using a constructor payload...

9.8CVSS8.3AI score0.03651EPSS
SaveExploits1References1
Prion
Prion
•added 2019/08/23 5:15 p.m.•45 views

Code injection

set-value is vulnerable to Prototype Pollution in versions lower than 3.0.1. The function mixin-deep could be tricked into adding or modifying properties of Object.prototype using any of the constructor, prototype and proto payloads...

7.5CVSS9.1AI score0.02475EPSS
SaveExploits1References4Affected Software1
UbuntuCve
UbuntuCve
•added 2019/08/23 5:15 p.m.•46 views

CVE-2019-10746

mixin-deep is vulnerable to Prototype Pollution in versions before 1.3.2 and version 2.0.0. The function mixin-deep could be tricked into adding or modifying properties of Object.prototype using a constructor payload...

9.8CVSS7.2AI score0.03651EPSS
SaveExploits1References4
Prion
Prion
•added 2019/08/23 5:15 p.m.•28 views

Design/Logic Flaw

mixin-deep is vulnerable to Prototype Pollution in versions before 1.3.2 and version 2.0.0. The function mixin-deep could be tricked into adding or modifying properties of Object.prototype using a constructor payload...

7.5CVSS9.1AI score0.03651EPSS
SaveExploits1References4Affected Software3
osv_ubuntu
osv_ubuntu
•added 2019/08/23 5:15 p.m.•19 views

UBUNTU-CVE-2019-10746

mixin-deep is vulnerable to Prototype Pollution in versions before 1.3.2 and version 2.0.0. The function mixin-deep could be tricked into adding or modifying properties of Object.prototype using a constructor payload...

9.8CVSS7.2AI score0.03651EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2019/08/23 4:43 p.m.•35 views

CVE-2019-10746

mixin-deep is vulnerable to Prototype Pollution in versions before 1.3.2 and version 2.0.0. The function mixin-deep could be tricked into adding or modifying properties of Object.prototype using a constructor payload...

9.2AI score0.03651EPSS
SaveExploits1References4
Debian CVE
Debian CVE
•added 2019/08/23 4:43 p.m.•39 views

CVE-2019-10746

mixin-deep is vulnerable to Prototype Pollution in versions before 1.3.2 and version 2.0.0. The function mixin-deep could be tricked into adding or modifying properties of Object.prototype using a constructor payload...

9.8CVSS9.1AI score0.03651EPSS
SaveExploits1
Mend
Mend
•added 2019/08/23 4:43 p.m.•6 views

CVE-2019-10746

mixin-deep is vulnerable to Prototype Pollution in versions before 1.3.2 and version 2.0.0. The function mixin-deep could be tricked into adding or modifying properties of Object.prototype using a constructor payload...

9.8CVSS0.03651EPSS
SaveExploits1References11
Rows per page
Query Builder