4053 matches found
CVE-2018-3752
The CVE-2018-3752 entry concerns the merge-options Node.js module (versions
CVE-2018-3751
The CVE-2018-3751 cases document a Prototype Pollution flaw in the Node.js module merge-recursive (versions
PT-2018-16172
Name of the Vulnerable Software and Affected Versions merge-recursive versions = 0.3.0 Description The issue allows an attacker to modify the prototype of Object, enabling the addition or modification of existing properties that will exist on all objects. This can occur when the attacker controls...
CVE-2018-3753: Improper Input Validation
The utilities function in all versions = 1.0.0 of the merge-objects node module can be tricked into modifying the prototype of Object when the attacker can control part of the structure passed to this function. This can let an attacker add or modify existing properties that will exist on all...
CVE-2018-3752: Improper Input Validation
The utilities function in all versions = 1.0.0 of the merge-options node module can be tricked into modifying the prototype of Object when the attacker can control part of the structure passed to this function. This can let an attacker add or modify existing properties that will exist on all...
CVE-2018-3751: Improper Input Validation
The utilities function in all versions = 0.3.0 of the merge-recursive node module can be tricked into modifying the prototype of Object when the attacker can control part of the structure passed to this function. This can let an attacker add or modify existing properties that will exist on all...
PT-2018-16173
Name of the Vulnerable Software and Affected Versions merge-options versions = 1.0.0 Description The issue allows an attacker to modify the prototype of Object when they can control part of the structure passed to the utilities function in the merge-options node module. This can enable an attacke...
PT-2018-16174
Name of the Vulnerable Software and Affected Versions merge-objects node module versions = 1.0.0 Description The utilities function in the merge-objects node module can be tricked into modifying the prototype of Object when the attacker can control part of the structure passed to this function...
OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969)
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Security. Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161. Difficult to exploit vulnerability allows unauthenticated attacker with network access via...
OpenJDK: incorrect merging of sections in the JAR manifest (Security, 8189969)
Vulnerability in the Java SE, Java SE Embedded component of Oracle Java SE subcomponent: Security. Supported versions that are affected are Java SE: 6u181, 7u171, 8u162 and 10; Java SE Embedded: 8u161. Difficult to exploit vulnerability allows unauthenticated attacker with network access via...
Merge PACS Cross-Site Request Forgery Vulnerability
Merge PACS is a reading workflow platform that streamlines physicians' reading activities and centrally manages learning. A cross-site request forgery vulnerability exists in Merge PACS 7.0. An attacker could exploit this vulnerability to launch arbitrary requests...
PortSwigger Web Security: Activat burp suite pro with the old license after transfared to anothe account
Hi team. I made 2 accounts and purchased burpsuite pro. The first account with this email :- ███████ The second account with this email :- ██████ I have opened a support ticket on Jun 13, 2018 05:26PM and the message is :- Hi Could you please add this account to my existing account ████ ███████ t...
CVE-2018-3721
lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutable Data MAID vulnerability via defaultsDeep, merge, and mergeWith functions, which allows a malicious user to modify the prototype of "Object" via proto, causing the addition or modification of an existing property tha...
CVE-2018-3722
merge-deep node module before 3.0.1 suffers from a Modification of Assumed-Immutable Data MAID vulnerability, which allows a malicious user to modify the prototype of "Object" via proto, causing the addition or modification of an existing property that will exist on all objects...
AZL-45420 CVE-2018-3721 affecting package js-jquery 3.5.0-4
lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutable Data MAID vulnerability via defaultsDeep, merge, and mergeWith functions, which allows a malicious user to modify the prototype of "Object" via proto, causing the addition or modification of an existing property tha...
CVE-2018-3721
lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutable Data MAID vulnerability via defaultsDeep, merge, and mergeWith functions, which allows a malicious user to modify the prototype of "Object" via proto, causing the addition or modification of an existing property tha...
CVE-2018-3721
lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutable Data MAID vulnerability via defaultsDeep, merge, and mergeWith functions, which allows a malicious user to modify the prototype of "Object" via proto, causing the addition or modification of an existing property tha...
Code injection
merge-deep node module before 3.0.1 suffers from a Modification of Assumed-Immutable Data MAID vulnerability, which allows a malicious user to modify the prototype of "Object" via proto, causing the addition or modification of an existing property that will exist on all objects...
Code injection
lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutable Data MAID vulnerability via defaultsDeep, merge, and mergeWith functions, which allows a malicious user to modify the prototype of "Object" via proto, causing the addition or modification of an existing property tha...
CVE-2018-3721
CVE-2018-3721 relates to the lodash node module prior to 4.17.5, enabling a prototype pollution MAID vulnerability through defaultsDeep, merge, and mergeWith that could modify Object.prototype via proto . The provided IBM security bulletin corroborates the vulnerability details for this CVE and l...