Lucene search
+L

54 matches found

RedHat Linux
RedHat Linux
added 2020/07/21 7:32 p.m.7 views

nodejs-minimist: prototype pollution allows adding or modifying properties of Object.prototype using a constructor or __proto__ payload

A flaw was found in nodejs-minimist, where it was tricked into adding or modifying properties of the Object.prototype using a "constructor" or "proto" payload. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

6.8CVSS7.3AI score0.01884EPSS
SaveExploits2References5
RedHat Linux
RedHat Linux
added 2020/07/13 10:51 a.m.6 views

nodejs-minimist: prototype pollution allows adding or modifying properties of Object.prototype using a constructor or __proto__ payload

A flaw was found in nodejs-minimist, where it was tricked into adding or modifying properties of the Object.prototype using a "constructor" or "proto" payload. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

6.8CVSS7.3AI score0.01884EPSS
SaveExploits2References5
RedHat Linux
RedHat Linux
added 2020/07/07 5:48 p.m.6 views

nodejs-minimist: prototype pollution allows adding or modifying properties of Object.prototype using a constructor or __proto__ payload

A flaw was found in nodejs-minimist, where it was tricked into adding or modifying properties of the Object.prototype using a "constructor" or "proto" payload. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

6.8CVSS7.3AI score0.01884EPSS
SaveExploits2References5
RedHat Linux
RedHat Linux
added 2020/07/07 9:27 a.m.8 views

nodejs-minimist: prototype pollution allows adding or modifying properties of Object.prototype using a constructor or __proto__ payload

A flaw was found in nodejs-minimist, where it was tricked into adding or modifying properties of the Object.prototype using a "constructor" or "proto" payload. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

6.8CVSS7.3AI score0.01884EPSS
SaveExploits2References5
RedHat Linux
RedHat Linux
added 2020/07/07 9:17 a.m.6 views

nodejs-minimist: prototype pollution allows adding or modifying properties of Object.prototype using a constructor or __proto__ payload

A flaw was found in nodejs-minimist, where it was tricked into adding or modifying properties of the Object.prototype using a "constructor" or "proto" payload. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

6.8CVSS7.3AI score0.01884EPSS
SaveExploits2References5
RedHat Linux
RedHat Linux
added 2020/07/07 9:14 a.m.6 views

nodejs-minimist: prototype pollution allows adding or modifying properties of Object.prototype using a constructor or __proto__ payload

A flaw was found in nodejs-minimist, where it was tricked into adding or modifying properties of the Object.prototype using a "constructor" or "proto" payload. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

6.8CVSS7.3AI score0.01884EPSS
SaveExploits2References5
RedHat Linux
RedHat Linux
added 2020/06/02 3:34 p.m.7 views

nodejs-minimist: prototype pollution allows adding or modifying properties of Object.prototype using a constructor or __proto__ payload

A flaw was found in nodejs-minimist, where it was tricked into adding or modifying properties of the Object.prototype using a "constructor" or "proto" payload. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

6.8CVSS7.3AI score0.01884EPSS
SaveExploits2References5
CNVD
CNVD
added 2020/03/12 12:0 a.m.10 views

minimist Input Validation Error Vulnerability

minimist is a command line parameter parsing tool. An input validation error vulnerability exists in minimist, which can be exploited by an attacker to add or modify properties of Object.prototype using the "constructor" or "proto" payload...

6.8CVSS8.5AI score0.01884EPSS
SaveExploits2References1
OSV
OSV
added 2020/03/11 11:15 p.m.14 views

AZL-44310 CVE-2020-7598 affecting package nodejs-nodemon 2.0.3-5

minimist before 1.2.2 could be tricked into adding or modifying properties of Object.prototype using a "constructor" or "proto" payload...

5.6CVSS6.9AI score0.01884EPSS
SaveExploits2References1
OSV
OSV
added 2020/03/11 11:15 p.m.7 views

UBUNTU-CVE-2020-7598

minimist before 1.2.2 could be tricked into adding or modifying properties of Object.prototype using a "constructor" or "proto" payload...

5.6CVSS6.7AI score0.01884EPSS
SaveExploits2References3
NVD
NVD
added 2019/08/23 5:15 p.m.22 views

CVE-2019-10746

mixin-deep is vulnerable to Prototype Pollution in versions before 1.3.2 and version 2.0.0. The function mixin-deep could be tricked into adding or modifying properties of Object.prototype using a constructor payload...

9.8CVSS9.3AI score0.03508EPSS
SaveExploits1References4
OSV
OSV
added 2019/08/23 5:15 p.m.2 views

DEBIAN-CVE-2019-10746

mixin-deep is vulnerable to Prototype Pollution in versions before 1.3.2 and version 2.0.0. The function mixin-deep could be tricked into adding or modifying properties of Object.prototype using a constructor payload...

9.8CVSS8.3AI score0.03508EPSS
SaveExploits1References1
OSV
OSV
added 2019/08/23 5:15 p.m.4 views

UBUNTU-CVE-2019-10746

mixin-deep is vulnerable to Prototype Pollution in versions before 1.3.2 and version 2.0.0. The function mixin-deep could be tricked into adding or modifying properties of Object.prototype using a constructor payload...

9.8CVSS7.2AI score0.03508EPSS
SaveExploits1References5
Prion
Prion
added 2019/08/23 5:15 p.m.21 views

Design/Logic Flaw

mixin-deep is vulnerable to Prototype Pollution in versions before 1.3.2 and version 2.0.0. The function mixin-deep could be tricked into adding or modifying properties of Object.prototype using a constructor payload...

7.5CVSS9.1AI score0.03508EPSS
SaveExploits1References4Affected Software3
Prion
Prion
added 2019/08/23 5:15 p.m.36 views

Code injection

set-value is vulnerable to Prototype Pollution in versions lower than 3.0.1. The function mixin-deep could be tricked into adding or modifying properties of Object.prototype using any of the constructor, prototype and proto payloads...

7.5CVSS9.1AI score0.02475EPSS
SaveExploits1References4Affected Software1
UbuntuCve
UbuntuCve
added 2019/08/23 5:15 p.m.38 views

CVE-2019-10746

mixin-deep is vulnerable to Prototype Pollution in versions before 1.3.2 and version 2.0.0. The function mixin-deep could be tricked into adding or modifying properties of Object.prototype using a constructor payload...

9.8CVSS7.2AI score0.03508EPSS
SaveExploits1References4
Cvelist
Cvelist
added 2019/08/23 4:43 p.m.26 views

CVE-2019-10746

mixin-deep is vulnerable to Prototype Pollution in versions before 1.3.2 and version 2.0.0. The function mixin-deep could be tricked into adding or modifying properties of Object.prototype using a constructor payload...

9.2AI score0.03508EPSS
SaveExploits1References4
Debian CVE
Debian CVE
added 2019/08/23 4:43 p.m.31 views

CVE-2019-10746

mixin-deep is vulnerable to Prototype Pollution in versions before 1.3.2 and version 2.0.0. The function mixin-deep could be tricked into adding or modifying properties of Object.prototype using a constructor payload...

9.8CVSS9.1AI score0.03508EPSS
SaveExploits1
Prion
Prion
added 2019/08/20 7:15 p.m.24 views

Design/Logic Flaw

assign-deep is vulnerable to Prototype Pollution in versions before 0.4.8 and version 1.0.0. The function assign-deep could be tricked into adding or modifying properties of Object.prototype using either a constructor or a proto payload...

5CVSS7.3AI score0.01142EPSS
SaveExploits1References1Affected Software1
OSV
OSV
added 2019/07/26 12:15 a.m.7 views

AZL-44634 CVE-2019-10744 affecting package js-jquery 3.5.0-4

Versions of lodash lower than 4.17.12 are vulnerable to Prototype Pollution. The function defaultsDeep could be tricked into adding or modifying properties of Object.prototype using a constructor payload...

9.1CVSS7AI score0.05006EPSS
SaveExploits2References1
Rows per page
Query Builder