CVE-2024-57064

A prototype pollution in the lib.setValue function of @syncfusion/ej2-spreadsheet v27.2.2 allows attackers to cause a Denial of Service DoS via supplying a crafted payload. NOTE: the Supplier disputes this because they found that the lib.setValue function is not utilized...

CVE-2024-41819

Note Mark is a web-based Markdown notes app. A stored cross-site scripting XSS vulnerability in Note Mark allows attackers to execute arbitrary web scripts via a crafted payload injected into the URL value of a link in the markdown content. This vulnerability is fixed in 0.13.1...

CVE-2024-1451

An issue has been discovered in GitLab CE/EE affecting all versions starting from 16.9 before 16.9.1. A crafted payload added to the user profile page could lead to a stored XSS on the client side, allowing attackers to perform arbitrary actions on behalf of victims."...

CVE-2024-57071

CVE-2024-57071 affects php-parser v3.2.1 through a prototype pollution in the lib.combine function, enabling DoS with a crafted payload. Connected sources confirm the vulnerability and provide a workaround (disable lib.combine) while noting no public exploit details in the documents. Exploitation...

CVE-2024-57063

A prototype pollution in the lib function of php-date-formatter v1.3.6 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57079

A prototype pollution in the lib.deepMerge function of @zag-js/core v0.50.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57075

A prototype pollution in the lib.Logger function of eazy-logger v4.0.1 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57064

The CVE refers to a prototype pollution issue in the lib.setValue function of Syncfusion EJ2-Spreadsheet (v27.2.2) that could enable DoS via crafted payloads. The supplier disputes the issue by noting that lib.setValue is not utilized. Connected documents consistently describe a DoS-inducing prot...

CVE-2024-57063

CVE-2024-57063 pertains to a prototype pollution vulnerability in the PHP package php-date-formatter (v1.3.6) where the lib function can be polluted via a crafted payload, causing a Denial of Service. The issue is documented across multiple sources (NVD/NVD-derived entries, Red Hat, CVE listings)...

CVE-2024-57065

CVE-2024-57065 describes a prototype pollution vulnerability in the package utile v0.3.0 , specifically in the function lib.createPath . The underlying issue is a prototype contamination flaw that can be triggered by a crafted payload, leading to a potential Denial of Service (DoS) . Several conn...

CVE-2024-57075

A prototype pollution in the lib.Logger function of eazy-logger v4.0.1 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

PT-2025-5758 · Npm · @Rpldy/Uploader

Name of the Vulnerable Software and Affected Versions: @rpldy/uploader version 1.8.1 Description: A prototype pollution in the lib.createUploader function allows attackers to cause a Denial of Service DoS via supplying a crafted payload. Recommendations: For @rpldy/uploader version 1.8.1, conside...

CVE-2024-57063

A prototype pollution in the lib function of php-date-formatter v1.3.6 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57080

CVE-2024-57080 describes a prototype pollution vulnerability in the vxe-table package (version 4.8.10) affecting the lib.install function. The root cause is unsafe handling in lib.install that allows overriding Object.prototype via crafted payloads, leading to potential DoS (per the advisory) and...

CVE-2024-57081

underscore-contrib v0.3.0 contains a prototype pollution flaw in the lib.fromQuery function. An attacker can trigger a Denial of Service by supplying a crafted payload that manipulates Object.prototype via the vulnerable path, as demonstrated in multiple sources (including Snyk reports). The core...

CVE-2024-57072

CVE-2024-57072 affects the module-from-string package (version 3.3.1) via a prototype pollution flaw in the lib.requireFromString function that can cause a Denial of Service (DoS) when a crafted payload is supplied. Exploitation status is not detailed in the provided documents. Remediation guidan...

CVE-2024-57066

A prototype pollution in the lib.deep function of @ndhoule/defaults v2.0.1 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57086

A prototype pollution in the function fieldsToJson of node-opcua-alarm-condition v2.134.0 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57086

CVE-2024-57086 affects node-opcua-alarm-condition (v2.134.0). The vulnerability is a prototype pollution in the fieldsToJson function, caused by a prototype contamination issue that can lead to a Denial of Service (DoS) when a crafted payload is supplied. Evidence from multiple sources confirms t...

CVE-2024-0199

An authorization bypass vulnerability was discovered in GitLab affecting versions 11.3 prior to 16.7.7, 16.7.6 prior to 16.8.4, and 16.8.3 prior to 16.9.2. An attacker could bypass CODEOWNERS by utilizing a crafted payload in an old feature branch to perform malicious actions...