cvelistV5

참고 2026-2-17 날짜 정규화 과정에서 잠재적 불일치를 해결하기 위해 추가 처리일을 추가합니다 새로운 날짜 정규화 일정: 2/16/26 - 2/28/26 참고 2026-2-10 레코드 날짜 정규화deltaLog.json 파일 변경 deltaLog.json 파일은 일반적으로 30일 분량의 CVE 레코드 수정 이력을 저장합니다. 그러나 날짜 정규화 과정2/16/26 - 2/28/26 기간 동안 deltaLog.json 파일은 일시적으로 15일 분량의 이력만 보관합니다. 많은 수의 레코드가 수정되므로 이렇게 하여...

vexhub-crawler

VEX Hub Crawler vexhub-crawler は、ソースリポジトリから VEX ドキュメントを自動的に取得する VEX Hub のコンポーネントです。 概要 クローラーは、登録された PURLs Package URLs からソースリポジトリを特定し、VEX ドキュメントを VEX Hub にコピーします。 このプロセスにより、VEX Hub はさまざまなソフトウェアパッケージ向けの最新の VEX ドキュメントコレクションを維持できます。 次の図は、npm を例として、VEX Hub Crawler の高レベルのプロセスフローを示しています： root@kitploit:...

vexhub

VEX Hubは、さまざまなオープンソースソフトウェアプロジェクトから Vulnerability Exploitability eXchange（VEX） ドキュメントを収集・管理する集中リポジトリです。 脆弱性情報の包括的なリソースとして機能し、ユーザーやセキュリティツールが複数のプロジェクトやエコシステムにわたってVEXデータへ効率的にアクセス・活用できるようにします。 VEX Hubは、登録されたプロジェクトのソースリポジトリからVEXドキュメントを自動的に取得します。 登録された Package URL（PURL） からソースリポジトリを特定することで、VEX...

threat-finder

OffSeq Threat Finder threat-finder individua il software vulnerabile effettivamente in esecuzione su un host — non ciò che un manifest dichiara — e ti dice quali risultati sono raggiungibili in rete. Risolve ogni servizio in esecuzione e, con --scope all, ogni pacchetto di sistema operativo...

EUVD-2021-7546

Malicious code in bioql PyPI...

CVE-2021-20089

Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' in purl 2.3.2 allows a malicious user to inject properties into Object.prototype...

CVE-2021-20089

Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' in purl 2.3.2 allows a malicious user to inject properties into Object.prototype...

CVE-2021-20089

Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' in purl 2.3.2 allows a malicious user to inject properties into Object.prototype...

CVE-2021-20089

Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' in purl 2.3.2 allows a malicious user to inject properties into Object.prototype...

Buffer overflow

Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' in purl 2.3.2 allows a malicious user to inject properties into Object.prototype...

CVE-2021-20089

Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' in purl 2.3.2 allows a malicious user to inject properties into Object.prototype...

CVE-2021-20089

CVE-2021-20089 affects purl 2.3.2, where improper modification of Object.prototype attributes enables prototype pollution. Root cause: input handling allows injecting properties into Object.prototype; this can impact confidentiality, integrity, and availability (per CVSS3.1 metrics). The availabl...

purl 安全漏洞

purl is a software application. An AMD-compatible utility that parses URLs and provides easy access to their attributes e.g., protocol, host, port, etc., path segments, query string parameters, fragment parameters, and more. A security vulnerability exists in purl 2.3.2, which arises from an...

PT-2021-13767 · Purl · Purl

Name of the Vulnerable Software and Affected Versions: purl version 2.3.2 Description: The issue is related to Improperly Controlled Modification of Object Prototype Attributes, also known as 'Prototype Pollution'. This allows a malicious user to inject properties into Object.prototype...

Vulnerablecode - A Free And Open Vulnerabilities Database And The Packages They Impact And The Tools To Aggregate And Correlate These Vulnerabilities

VulnerableCode is a free and open database of FOSS software package vulnerabilities and the tools to create and keep the data current. It is made by the FOSS community to improve and secure the open source software ecosystem. Why? The existing solutions are commercial proprietary vulnerability...