Lucene search
+L

6057 matches found

Mageia
Mageia
•added 2022/07/29 8:53 p.m.•72 views

Updated firefox packages fix security vulnerability

When visiting directory listings for chrome:// URLs as source text, some parameters were reflected CVE-2022-36318. When combining CSS properties for overflow and transform, the mouse cursor could interact with different coordinates than displayed CVE-2022-36319...

7.5CVSS3.8AI score0.00713EPSS
SaveExploits0References4
Openbugbounty
Openbugbounty
•added 2022/07/23 12:36 p.m.•17 views

convert.french-property.co.uk Cross Site Scripting vulnerability OBB-2810552

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
Ubuntu
Ubuntu
•added 2022/07/20 10:47 a.m.•87 views

USN-5525-1: Apache XML Security for Java vulnerability

It was discovered that Apache XML Security for Java incorrectly passed a configuration property when creating specific key elements. This allows an attacker to abuse an XPath Transform to extract sensitive information...

7.5CVSS6.7AI score0.0738EPSS
SaveExploits0
OSV
OSV
•added 2022/07/20 10:47 a.m.•19 views

USN-5525-1 libxml-security-java vulnerability

It was discovered that Apache XML Security for Java incorrectly passed a configuration property when creating specific key elements. This allows an attacker to abuse an XPath Transform to extract sensitive information...

7.5CVSS6.8AI score0.0738EPSS
SaveExploits0References2
Openbugbounty
Openbugbounty
•added 2022/07/20 9:53 a.m.•17 views

purcellproperty.com.au Cross Site Scripting vulnerability OBB-2800306

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

6.2AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2022/07/20 12:00 a.m.•19 views

Vulnerability of the njs_value_property() function (njs_value.c) in the njs interpreter of the nginx server, allowing a hacker to execute arbitrary code

The vulnerability of the njsvalueproperty function njsvalue.c in the njs interpreter of the nginx server is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

7.5CVSS8AI score0.00916EPSS
SaveExploits1References2Affected Software1
zdt
zdt
•added 2022/07/19 12:00 a.m.•338 views

Property Listing Script 3.1 SQL Injection Vulnerability

┌┌────────────────────────────────────────────────────────────────────────────────────┐ ││ C r a C k E r ┌┘ ┌┘ T H E C R A C K O F E T E R N A L M I G H T ││ └────────────────────────────────────────────────────────────────────────────────────┘┘ ┌──── From The Ashes and Dust Rises An Unimaginable...

0.5AI score
SaveExploits0
attackerkb
attackerkb
•added 2022/07/18 9:15 p.m.•13 views

CVE-2022-34027

Nginx NJS v0.7.4 was discovered to contain a segmentation violation via njsvalueproperty at njsvalue.c...

7.5CVSS5.9AI score0.00916EPSS
SaveExploits1References2
Veracode
Veracode
•added 2022/07/18 4:25 a.m.•29 views

Prototype Pollution

grunt-util-property is vulnerable to prototype pollution. An attacker is able to inject properties into existing construct prototypes and modify attributes such as proto, constructor and prototype...

7.8CVSS7.3AI score0.00379EPSS
SaveExploits1References2Affected Software1
OSV
OSV
•added 2022/07/18 12:00 a.m.•9 views

GHSA-4HQ8-JGR8-MW9J grunt-util-property 0.0.2 function call can add/modify properties of Object.prototype using a __proto__ payload

This affects all versions of package grunt-util-property. The function call could be tricked into adding or modifying properties of Object.prototype using a proto payload...

7.8CVSS5.8AI score0.00379EPSS
SaveExploits1References4
vulnersOsv
vulnersOsv
•added 2022/07/18 12:00 a.m.•5 views

grunt-git-describe (>=2.3.1, <=2.4.4), grunt-git-describe-plus (2.3.3-0) +3 more potentially affected by CVE-2020-7641 via grunt-util-property (0.0.2)

grunt-util-property NPM version 0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on grunt-util-property and may be impacted: - grunt-git-describe =2.3.1, =0.1.5, =0.0.1, =0.0.4 Source cves: CVE-2020-7641 Source advisory: OSV:GHSA-4HQ8-JGR8-MW9J...

7.8CVSS7.4AI score0.00379EPSS
SaveExploits1
Github Security Blog
Github Security Blog
•added 2022/07/18 12:00 a.m.•44 views

grunt-util-property 0.0.2 function call can add/modify properties of Object.prototype using a __proto__ payload

This affects all versions of package grunt-util-property. The function call could be tricked into adding or modifying properties of Object.prototype using a proto payload...

7.8CVSS7.3AI score0.00379EPSS
SaveExploits1References4Affected Software1
OSV
OSV
•added 2022/07/17 9:15 a.m.•17 views

CVE-2020-7641

This affects all versions of package grunt-util-property. The function call could be tricked into adding or modifying properties of Object.prototype using a proto payload...

7.8CVSS5.8AI score0.00379EPSS
SaveExploits1References2
CVE
CVE
•added 2022/07/17 8:40 a.m.•62 views

CVE-2020-7641

CVE-2020-7641 affects the npm package grunt-util-property (all versions). The vulnerability is prototype pollution: the function call could be tricked into adding or modifying properties of Object.prototype using a proto payload, enabling an attacker to modify base object behavior. Public descrip...

7.8CVSS5.7AI score0.00379EPSS
SaveExploits1References2Affected Software1
Mend
Mend
•added 2022/07/17 8:40 a.m.•3 views

CVE-2020-7641

This affects all versions of package grunt-util-property. The function call could be tricked into adding or modifying properties of Object.prototype using a proto payload...

7.8CVSS0.00379EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2022/07/17 8:40 a.m.•45 views

CVE-2020-7641 Prototype Pollution

This affects all versions of package grunt-util-property. The function call could be tricked into adding or modifying properties of Object.prototype using a proto payload...

4CVSS7.6AI score0.00379EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2022/07/17 8:39 a.m.•14 views

CVE-2020-7641

This affects all versions of package grunt-util-property. The function call could be tricked into adding or modifying properties of Object.prototype using a proto payload...

7.8CVSS7.3AI score0.00379EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/07/17 12:00 a.m.•4 views

CVE-2020-7641: Improperly Controlled Modification of Object Prototype Attributes

This affects all versions of package grunt-util-property. The function call could be tricked into adding or modifying properties of Object.prototype using a proto payload...

7.8CVSS7.3AI score0.00379EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/07/17 12:00 a.m.•18 views

grunt-util-property 安全漏洞

grunt-util-property is a package by mikaelkaron personal developer. A security vulnerability exists in grunt-util-property that stems from susceptibility to prototype contamination, where the function call may be tricked into adding or modifying properties of Object.prototype using the proto...

7.8CVSS7.2AI score0.00379EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2022/07/17 12:00 a.m.•2 views

PT-2022-9058

Name of the Vulnerable Software and Affected Versions grunt-util-property versions all Description The function call in the affected package could be tricked into adding or modifying properties of Object.prototype using a proto payload. This allows for potential manipulation of the object's...

7.8CVSS0.00379EPSS
SaveExploits1References8
Rows per page
Query Builder