CVE-2023-35997

Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability...

CVE-2023-35995

Multiple improper array index validation vulnerabilities exist in the fstReaderIterBlocks2 tdelta functionality of GTKWave 3.3.115. A specially crafted .fst file can lead to arbitrary code execution. A victim would need to open a malicious file to trigger these vulnerabilities.This vulnerability...

PT-2024-12543 · Gtkwave · Gtkwave

Name of the Vulnerable Software and Affected Versions: GTKWave version 3.3.115 Description: The issue is related to improper array index validation in the fstReaderIterBlocks2 tdelta functionality. A specially crafted .fst file can lead to arbitrary code execution when opened by a victim. The...

CVE-2023-4468

Poly Trio 8500/8800/C60 devices are affected by CVE-2023-4468 in the Poly Lens Management Cloud Registration component, enabling missing authorization with physical access to the device. The vulnerability is described as exploitable on the physical device, with public disclosure. Connected docume...

Poly Trio Security Breach

Poly Trio is a Trio series of business conference phones from Poly USA. Lens is a distribution of the OpenLens repository, which contains Team Lens-specific customizations released under the legacy EULA. A security vulnerability exists in Poly Trio version 8800 and Trio version C60 that stems fro...

CVE-2023-4468: Missing Authorization

A vulnerability was found in Poly Trio 8500, Trio 8800 and Trio C60. It has been classified as problematic. This affects an unknown part of the component Poly Lens Management Cloud Registration. The manipulation leads to missing authorization. It is possible to launch the attack on the physical...

PT-2023-8565 · Poly · Poly Lens +3

Name of the Vulnerable Software and Affected Versions: Poly Trio 8500 version unknown Poly Trio 8800 version unknown Poly Trio C60 version unknown Description: A vulnerability was found in the Poly Lens Management Cloud Registration component, affecting an unknown part of it. The manipulation lea...

Malicious code in reality-lens-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d73114040cfd355b02673805037b5ea306f6ff220002f3502325b5343fabf434 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-739 Malicious code in reality-lens-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d73114040cfd355b02673805037b5ea306f6ff220002f3502325b5343fabf434 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

dot-lens vulnerable to Prototype Pollution

All versions of the package dot-lens are vulnerable to Prototype Pollution via the set function in index.js file...

csv-interact (>=0.0.1, <=1.0.0), jb55-json2csv (>=3.0.0, <=3.1.1) +1 more potentially affected by CVE-2023-26106 via dot-lens (1.2.3)

dot-lens NPM version 1.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on dot-lens and may be impacted: - csv-interact =0.0.1, =3.0.0, =3.1.1 - tableize-csv-parser 0.0.1 Source cves: CVE-2023-26106 Source advisory: OSV:GHSA-RMHG-2CVV-Q7VX...

GHSA-RMHG-2CVV-Q7VX dot-lens vulnerable to Prototype Pollution

All versions of the package dot-lens are vulnerable to Prototype Pollution via the set function in index.js file...

CVE-2023-26106

All versions of the package dot-lens are vulnerable to Prototype Pollution via the set function in index.js file...

CVE-2023-26106

All versions of the package dot-lens are vulnerable to Prototype Pollution via the set function in index.js file...

CVE-2023-26106

All versions of the package dot-lens are vulnerable to Prototype Pollution via the set function in index.js file...

CVE-2023-26106

All versions of the package dot-lens are vulnerable to Prototype Pollution via the set function in index.js file...

CVE-2023-26106

CVE-2023-26106 (dot-lens) : Multiple connected sources confirm a Prototype Pollution flaw via the set() function in index.js, affecting all versions of the dot-lens package. Root cause: prototype contamination through set(), enabling unexpected modifications to objects. Reported impact is high (C...

CVE-2023-26106

All versions of the package dot-lens are vulnerable to Prototype Pollution via the set function in index.js file...

dot-lens 安全漏洞

dot-lens is a JavaScript library. A security vulnerability exists in dot-lens that stems from prototype contamination of the set function in the index.js file...

PT-2023-20493 · Dot-Lens · Dot-Lens

Name of the Vulnerable Software and Affected Versions: dot-lens versions all Description: The issue concerns Prototype Pollution via the set function in the index.js file. This affects all versions of the dot-lens package. There is no information provided about the estimated number of potentially...