4047 matches found
GitLab 安全漏洞
GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A security vulnerability exists in GitLab CE/EE, which...
CVE-2021-22230: Undefined Security Weakness
Improper code rendering while rendering merge requests could be exploited to submit malicious code. This vulnerability affects GitLab CE/EE 9.3 and later through 13.11.6, 13.12.6, and 14.0.2...
Unspecified vulnerability in ts-nodash
ts-nodash is a tool that provides object manipulation. A security vulnerability exists in ts-nodash that stems from a lack of validated input, and all versions of package -nodash are vulnerable to prototype contamination via the Merge function. No detailed vulnerability details are provided at th...
CVE-2021-23403
All versions of package ts-nodash are vulnerable to Prototype Pollution via the Merge function due to lack of validation input...
CVE-2021-23403
All versions of package ts-nodash are vulnerable to Prototype Pollution via the Merge function due to lack of validation input...
Input validation
All versions of package ts-nodash are vulnerable to Prototype Pollution via the Merge function due to lack of validation input...
CVE-2021-23403
All versions of package ts-nodash are vulnerable to Prototype Pollution via the Merge function due to lack of validation input...
CVE-2021-23403 Prototype Pollution
All versions of package ts-nodash are vulnerable to Prototype Pollution via the Merge function due to lack of validation input...
CVE-2021-23403
All versions of package ts-nodash are vulnerable to Prototype Pollution via the Merge function due to lack of validation input...
PT-2021-15494
Name of the Vulnerable Software and Affected Versions ts-nodash versions prior to 1.2.7 Description The issue is related to Prototype Pollution via the Merge function due to a lack of validation input. This affects the ts-nodash package. Recommendations For versions prior to 1.2.7, update to...
ts-nodash 安全漏洞
ts-nodash is a tool that provides object manipulation. A security vulnerability exists in ts-nodash that stems from a lack of validated input, and all versions of package -nodash are vulnerable to prototype contamination via the Merge function. No detailed vulnerability details are provided at th...
CVE-2021-23403: Improperly Controlled Modification of Object Prototype Attributes
All versions of package ts-nodash are vulnerable to Prototype Pollution via the Merge function due to lack of validation input...
PT-2021-6607 · Gitlab · Gitlab Ce/Ee +1
Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 9.3 through 13.11.6 GitLab CE/EE version 13.12.6 GitLab CE/EE version 14.0.2 Description: The issue is related to improper code rendering while rendering merge requests, which could be exploited to submit malicious code...
OESA-2021-1246 httpd security update
Apache HTTP Server is a powerful and flexible HTTP/1.1 compliant web server. Security Fixes: In Apache HTTP Server versions 2.4.0 to 2.4.46 a specially crafted SessionHeader sent by an origin server could cause a heap overflowCVE-2021-26691 Apache HTTP Server versions 2.4.41 to 2.4.46 modproxyhtt...
Unexpected URL matching with 'MergeSlashes OFF'
...
GHSA-3R8W-MPHV-2F3F Prototype Pollution in lutils
All versions of package lutils are vulnerable to Prototype Pollution via the main merge function...
USN-4994-2 apache2 vulnerabilities
USN-4994-1 fixed several vulnerabilities in Apache. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: Antonio Morales discovered that the Apache modauthdigest module incorrectly handled certain Digest nonces. A remote attacker coul...
USN-4994-1 apache2 vulnerabilities
Marc Stern discovered that the Apache modproxyhttp module incorrectly handled certain requests. A remote attacker could possibly use this issue to cause Apache to crash, resulting in a denial of service. This issue only affected Ubuntu 20.04 LTS, Ubuntu 20.10, and Ubuntu 21.04. CVE-2020-13950...