Lucene search
+L

48 matches found

OSV
OSV
added 2021/09/27 5:15 p.m.6 views

UBUNTU-CVE-2021-23445

This affects the package datatables.net before 1.11.3. If an array is passed to the HTML escape entities function it would not have its contents escaped...

6.1CVSS6.2AI score0.01975EPSS
SaveExploits1References7
UbuntuCve
UbuntuCve
added 2021/09/27 5:15 p.m.38 views

CVE-2021-23445

This affects the package datatables.net before 1.11.3. If an array is passed to the HTML escape entities function it would not have its contents escaped...

6.1CVSS6.3AI score0.01975EPSS
SaveExploits1References6
Debian CVE
Debian CVE
added 2021/09/27 4:35 p.m.53 views

CVE-2021-23445

This affects the package datatables.net before 1.11.3. If an array is passed to the HTML escape entities function it would not have its contents escaped...

6.1CVSS5AI score0.01975EPSS
SaveExploits1
CVE
CVE
added 2021/09/27 4:35 p.m.204 views

CVE-2021-23445

CVE-2021-23445 affects datatables.net prior to 1.11.3, where passing an array to the HTML escape entities function could leave contents unescaped, enabling potential XSS. Public references confirm the flaw exists in the package and that upgrading to 1.11.3 fixes the issue (e.g., DataTables releas...

6.1CVSS5.4AI score0.01975EPSS
SaveExploits1References7Affected Software1
ATTACKERKB
ATTACKERKB
added 2021/09/27 4:31 p.m.6 views

CVE-2021-23445

This affects the package datatables.net before 1.11.3. If an array is passed to the HTML escape entities function it would not have its contents escaped...

6.1CVSS5.3AI score0.01975EPSS
SaveExploits1References8
vulnersOsv
vulnersOsv
added 2021/08/12 5:30 p.m.6 views

@christianhugo/cli (>=0.7.2-beta.6 <=0.7.3-beta.15), @christianhugo/mobile-builder (>=0.7.2-beta.6 <=0.7.4-beta.9) +72 more potentially affected by CVE-2021-23445 via datatables.net (>=1.10.12 <=1.10.25)

datatables.net NPM version =1.10.12, =0.7.2-beta.6, =0.7.2-beta.6, =0.7.2-beta.6, =0.7.2-beta.6, =0.6.4-beta.10, =0.7.2-beta.7, =0.6.4-beta.10, =0.6.4-beta.10, =1.0.0, =1.0.0, =3.0.0, =3.0.11 and more Source cves: CVE-2021-23445 Source advisory: SNYK:JS-DATATABLESNET-1540544...

6.1CVSS6.2AI score0.01975EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2021/04/15 12:0 a.m.69 views

RHEL 8 : RHV Manager (ovirt-engine) 4.4.z [ovirt-4.4.5] security, (Moderate) (RHSA-2021:1169)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:1169 advisory. The ovirt-engine package provides the manager for virtualization environments. This manager enables admins to define hosts and networks, as...

7.5CVSS7.3AI score0.0367EPSS
SaveExploits3References41
RedHat Linux
RedHat Linux
added 2021/04/14 4:34 p.m.28 views

datatables.net: prototype pollution if 'constructor' were used in a data property name

All versions of package datatables.net are vulnerable to Prototype Pollution due to an incomplete fix for https://snyk.io/vuln/SNYK-JS-DATATABLESNET-598806...

7.5CVSS5.8AI score0.0367EPSS
SaveExploits2References5
RedHat Linux
RedHat Linux
added 2021/04/14 4:34 p.m.81 views

Moderate: Red Hat Security Advisory: RHV Manager (ovirt-engine) 4.4.z [ovirt-4.4.5] 0-day security, bug fix, enhance

An update for org.ovirt.engine-root, ovirt-engine-ui-extensions, and ovirt-web-ui is now available for Red Hat Virtualization Engine 4.4. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a...

7.5CVSS6.5AI score0.0367EPSS
SaveExploits2References8
RedHat Linux
RedHat Linux
added 2021/04/14 4:34 p.m.4 views

datatables.net: prototype pollution if 'constructor' were used in a data property name

All versions of package datatables.net are vulnerable to Prototype Pollution due to an incomplete fix for https://snyk.io/vuln/SNYK-JS-DATATABLESNET-598806...

7.5CVSS5.8AI score0.0367EPSS
SaveExploits2References5
RedHat Linux
RedHat Linux
added 2021/04/14 11:41 a.m.4 views

datatables.net: prototype pollution if 'constructor' were used in a data property name

All versions of package datatables.net are vulnerable to Prototype Pollution due to an incomplete fix for https://snyk.io/vuln/SNYK-JS-DATATABLESNET-598806...

7.5CVSS5.8AI score0.0367EPSS
SaveExploits2References5
RedHat Linux
RedHat Linux
added 2021/04/14 11:41 a.m.78 views

Moderate: Red Hat Security Advisory: RHV RHEL Host (ovirt-host) 4.4.z [ovirt-4.4.5] security, bug fix, enhancement

Updated host packages that fix several bugs and add various enhancements are now available. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

7.5CVSS6.4AI score0.0367EPSS
SaveExploits2References17
vulnersOsv
vulnersOsv
added 2020/12/17 9:0 p.m.13 views

@coreui/coreui-datatables (=1.0.0), @daai/sb-decloud (>=1.0.0 <=1.0.11) +38 more potentially affected by CVE-2020-28458 via datatables.net (>=1.10.12 <=1.10.21)

datatables.net NPM version =1.10.12, =1.0.0, =1.0.0, =3.0.0, =1.1.1, =0.0.1, =1.0.2, =1.0.0, =1.0.0, =0.0.0, =0.1.56, =0.2.151 and more Source cves: CVE-2020-28458 Source advisory: OSV:GHSA-M7J4-FHG6-XF5V...

7.5CVSS6.7AI score0.0367EPSS
SaveExploits2
Github Security Blog
Github Security Blog
added 2020/12/17 9:0 p.m.390 views

datatables.net vulnerable to Prototype Pollution due to incomplete fix

All versions of package datatables.net are vulnerable to Prototype Pollution due to an incomplete fix for https://snyk.io/vuln/SNYK-JS-DATATABLESNET-598806...

7.5CVSS7.2AI score0.0367EPSS
SaveExploits2References9Affected Software1
OSV
OSV
added 2020/12/17 9:0 p.m.5 views

GHSA-M7J4-FHG6-XF5V datatables.net vulnerable to Prototype Pollution due to incomplete fix

All versions of package datatables.net are vulnerable to Prototype Pollution due to an incomplete fix for https://snyk.io/vuln/SNYK-JS-DATATABLESNET-598806...

7.3CVSS6.6AI score0.0367EPSS
SaveExploits2References9
Veracode
Veracode
added 2020/12/17 3:35 a.m.40 views

Prototype Pollution

datatables.net is vulnerable to prototype pollution. The vulnerabilities exists as it does not sanitize values of the proto and constructor headers...

7.3CVSS2.9AI score0.0367EPSS
SaveExploits2References4Affected Software1
RedhatCVE
RedhatCVE
added 2020/12/16 5:53 p.m.51 views

CVE-2020-28458

All versions of package datatables.net are vulnerable to Prototype Pollution due to an incomplete fix for https://snyk.io/vuln/SNYK-JS-DATATABLESNET-598806...

7.5CVSS2.7AI score0.0367EPSS
SaveExploits2References4
OSV
OSV
added 2020/12/16 11:15 a.m.53 views

CVE-2020-28458

All versions of package datatables.net are vulnerable to Prototype Pollution due to an incomplete fix for https://snyk.io/vuln/SNYK-JS-DATATABLESNET-598806...

7.3CVSS7.2AI score
SaveExploits0References7
NVD
NVD
added 2020/12/16 11:15 a.m.33 views

CVE-2020-28458

All versions of package datatables.net are vulnerable to Prototype Pollution due to an incomplete fix for https://snyk.io/vuln/SNYK-JS-DATATABLESNET-598806...

7.5CVSS7.5AI score0.0367EPSS
SaveExploits2References7
OSV
OSV
added 2020/12/16 11:15 a.m.9 views

AZL-53184 CVE-2020-28458 affecting package reaper for versions less than 3.1.1-15

All versions of package datatables.net are vulnerable to Prototype Pollution due to an incomplete fix for https://snyk.io/vuln/SNYK-JS-DATATABLESNET-598806...

7.3CVSS6.5AI score0.0367EPSS
SaveExploits2References1
Rows per page
Query Builder