Poly Trio Security Breach

Poly Trio is a Trio series of business conference phones from Poly USA. Lens is a distribution of the OpenLens repository, which contains Team Lens-specific customizations released under the legacy EULA. A security vulnerability exists in Poly Trio version 8800 and Trio version C60 that stems fro...

CVE-2023-4468: Missing Authorization

A vulnerability was found in Poly Trio 8500, Trio 8800 and Trio C60. It has been classified as problematic. This affects an unknown part of the component Poly Lens Management Cloud Registration. The manipulation leads to missing authorization. It is possible to launch the attack on the physical...

PT-2023-8565 · Poly · Poly Lens +3

Name of the Vulnerable Software and Affected Versions: Poly Trio 8500 version unknown Poly Trio 8800 version unknown Poly Trio C60 version unknown Description: A vulnerability was found in the Poly Lens Management Cloud Registration component, affecting an unknown part of it. The manipulation lea...

MAL-2023-739 Malicious code in reality-lens-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d73114040cfd355b02673805037b5ea306f6ff220002f3502325b5343fabf434 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in reality-lens-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d73114040cfd355b02673805037b5ea306f6ff220002f3502325b5343fabf434 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

csv-interact (>=0.0.1, <=1.0.0), jb55-json2csv (>=3.0.0, <=3.1.1) +1 more potentially affected by CVE-2023-26106 via dot-lens (1.2.3)

dot-lens NPM version 1.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on dot-lens and may be impacted: - csv-interact =0.0.1, =3.0.0, =3.1.1 - tableize-csv-parser 0.0.1 Source cves: CVE-2023-26106 Source advisory: OSV:GHSA-RMHG-2CVV-Q7VX...

dot-lens vulnerable to Prototype Pollution

All versions of the package dot-lens are vulnerable to Prototype Pollution via the set function in index.js file...

GHSA-RMHG-2CVV-Q7VX dot-lens vulnerable to Prototype Pollution

All versions of the package dot-lens are vulnerable to Prototype Pollution via the set function in index.js file...

CVE-2023-26106

All versions of the package dot-lens are vulnerable to Prototype Pollution via the set function in index.js file...

CVE-2023-26106

CVE-2023-26106 (dot-lens) : Multiple connected sources confirm a Prototype Pollution flaw via the set() function in index.js, affecting all versions of the dot-lens package. Root cause: prototype contamination through set(), enabling unexpected modifications to objects. Reported impact is high (C...

CVE-2023-26106

All versions of the package dot-lens are vulnerable to Prototype Pollution via the set function in index.js file...

CVE-2023-26106

All versions of the package dot-lens are vulnerable to Prototype Pollution via the set function in index.js file...

CVE-2023-26106

All versions of the package dot-lens are vulnerable to Prototype Pollution via the set function in index.js file...

PT-2023-20493 · Dot-Lens · Dot-Lens

Name of the Vulnerable Software and Affected Versions: dot-lens versions all Description: The issue concerns Prototype Pollution via the set function in the index.js file. This affects all versions of the dot-lens package. There is no information provided about the estimated number of potentially...

CVE-2023-26106: Improperly Controlled Modification of Object Prototype Attributes

All versions of the package dot-lens are vulnerable to Prototype Pollution via the set function in index.js file...

dot-lens 安全漏洞

dot-lens is a JavaScript library. A security vulnerability exists in dot-lens that stems from prototype contamination of the set function in the index.js file...

SUSE CVE-2008-2696

Exiv2 0.16 allows user-assisted remote attackers to cause a denial of service divide-by-zero and application crash via a zero value in Nikon lens information in the metadata of an image, related to "pretty printing" and the RationalValue::toLong function...

SUSE CVE-2020-20892

An issue was discovered in function filterframe in libavfilter/vflenscorrection.c in Ffmpeg 4.2.1, allows attackers to cause a Denial of Service or other unspecified impacts due to a division by zero...

csv-interact (>=0.0.1, <=1.0.0), jb55-json2csv (>=3.0.0, <=3.1.1) +1 more potentially affected by CVE-2023-26106 via dot-lens (1.2.3)

dot-lens NPM version 1.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on dot-lens and may be impacted: - csv-interact =0.0.1, =3.0.0, =3.1.1 - tableize-csv-parser 0.0.1 Source cves: CVE-2023-26106 Source advisory: SNYK:JS-DOTLENS-3227646...

Prototype Pollution

Overview dot-lens is a Simple, compiled dot lenses Affected versions of this package are vulnerable to Prototype Pollution via the set function in index.js file. PoC var dot = require"dot-lens" console.log"before:"+.test dot.set"proto.test","123" console.log"after:"+.test Details Prototype...