Lucene search
+L

286 matches found

vulnersOsv
vulnersOsv
added 2026/04/15 6:31 p.m.8 views

@amitojsingh366/keepkey-hardware-controller (=0.0.10), @apsiocoin/protobuf-serialization (=0.0.1-alpha1) +199 more potentially affected by CVE-2026-5758 via protocol-buffers-schema (>=2.2.0 <=3.6.0)

protocol-buffers-schema NPM version =2.2.0, =2.0.9, =2.0.7, =2.1.2, =0.0.25, =0.0.19, =2.0.12, =2.0.11, =0.0.12, =6.1.2, =0.18.4, =0.18.4, =1.16.11, =1.4.2, =2.14.3 and more Source cves: CVE-2026-5758 Source advisory: OSV:GHSA-J452-XHG8-QG39...

6.5CVSS5.7AI score0.00534EPSS
Exploits0
Snyk
Snyk
added 2026/04/15 6:31 p.m.20 views

Prototype Pollution

Overview org.webjars.npm:protocol-buffers-schema is a No nonsense protocol buffers schema parser written in Javascript Affected versions of this package are vulnerable to Prototype Pollution via the parse function. An attacker can modify object prototypes, potentially altering application logic,...

6.9CVSS6.4AI score0.00534EPSS
Exploits0References2
EUVD
EUVD
added 2026/04/15 6:31 p.m.30 views

EUVD-2026-22993

JavaScript is vulnerable to prototype pollution in Mafintosh's protocol-buffers-schema Version 3.6.0, where an attacker may alter the application logic, bypass security checks, cause a DoS or achieve remote code execution...

6.5CVSS6.1AI score0.00534EPSS
Exploits0References3
vulnersOsv
vulnersOsv
added 2026/04/15 6:31 p.m.9 views

@amitojsingh366/keepkey-hardware-controller (=0.0.10), @apsiocoin/protobuf-serialization (=0.0.1-alpha1) +176 more potentially affected by CVE-2026-5758 via protocol-buffers-schema (>=3.1.0 <=3.6.0)

protocol-buffers-schema NPM version =3.1.0, =2.0.9, =2.0.7, =2.1.2, =0.0.25, =0.0.19, =2.0.12, =2.0.11, =0.0.12, =6.1.2, =0.18.4, =0.18.4, =1.16.11, =1.4.2, =2.14.3 and more Source cves: CVE-2026-5758 Source advisory: SNYK:JS-PROTOCOLBUFFERSSCHEMA-16420259...

6.5CVSS5.7AI score0.00534EPSS
Exploits0
Snyk
Snyk
added 2026/04/15 6:31 p.m.10 views

Prototype Pollution

Overview protocol-buffers-schema is a No nonsense protocol buffers schema parser written in Javascript Affected versions of this package are vulnerable to Prototype Pollution via the parse function. An attacker can modify object prototypes, potentially altering application logic, bypassing securi...

6.9CVSS6.3AI score0.00534EPSS
Exploits0References2
Github Security Blog
Github Security Blog
added 2026/04/15 6:31 p.m.14 views

Mafintosh's protocol-buffers-schema is vulnerable to prototype pollution

JavaScript is vulnerable to prototype pollution in Mafintosh's protocol-buffers-schema Version 3.6.0, where an attacker may alter the application logic, bypass security checks, cause a DoS or achieve remote code execution...

6.5CVSS6.1AI score0.00534EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2026/04/15 6:31 p.m.19 views

GHSA-J452-XHG8-QG39 Mafintosh's protocol-buffers-schema is vulnerable to prototype pollution

JavaScript is vulnerable to prototype pollution in Mafintosh's protocol-buffers-schema Version 3.6.0, where an attacker may alter the application logic, bypass security checks, cause a DoS or achieve remote code execution...

6.5CVSS6.1AI score0.00534EPSS
Exploits0References4
NVD
NVD
added 2026/04/15 6:17 p.m.47 views

CVE-2026-5758

JavaScript is vulnerable to prototype pollution in Mafintosh's protocol-buffers-schema Version 3.6.0, where an attacker may alter the application logic, bypass security checks, cause a DoS or achieve remote code execution...

6.5CVSS0.00534EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/04/15 5:20 p.m.4 views

CVE-2026-5758 Mafintosh's protocol-buffers-schema is vulnerable to prototype pollution

JavaScript is vulnerable to prototype pollution in Mafintosh's protocol-buffers-schema Version 3.6.0, where an attacker may alter the application logic, bypass security checks, cause a DoS or achieve remote code execution...

6.1AI score0.00534EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2026/04/15 5:20 p.m.3 views

CVE-2026-5758

JavaScript is vulnerable to prototype pollution in Mafintosh's protocol-buffers-schema Version 3.6.0, where an attacker may alter the application logic, bypass security checks, cause a DoS or achieve remote code execution...

6.5CVSS6.1AI score0.00534EPSS
Exploits0References3Affected Software1
CVE
CVE
added 2026/04/15 5:20 p.m.20 views

CVE-2026-5758

CVE-2026-5758 is a prototype pollution vulnerability in Mafintosh's protocol-buffers-schema 3.6.0. IBM's security postings confirm the issue can allow an attacker to alter application logic, bypass security checks, cause a DoS, or achieve remote code execution. Affected product: IBM Maximo Applic...

6.5CVSS6.1AI score0.00534EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/04/15 5:20 p.m.51 views

CVE-2026-5758 Mafintosh's protocol-buffers-schema is vulnerable to prototype pollution

JavaScript is vulnerable to prototype pollution in Mafintosh's protocol-buffers-schema Version 3.6.0, where an attacker may alter the application logic, bypass security checks, cause a DoS or achieve remote code execution...

0.00534EPSS
Exploits0References2
OSV
OSV
added 2026/04/15 5:20 p.m.3 views

CVE-2026-5758 Mafintosh's protocol-buffers-schema is vulnerable to prototype pollution

JavaScript is vulnerable to prototype pollution in Mafintosh's protocol-buffers-schema Version 3.6.0, where an attacker may alter the application logic, bypass security checks, cause a DoS or achieve remote code execution...

6.5CVSS6.2AI score0.00534EPSS
Exploits0References4
CNNVD
CNNVD
added 2026/04/15 12:0 a.m.15 views

protocol-buffers-schema 安全漏洞

protocol-buffers-schema is a Protocol Buffers pattern parser written in JavaScript by Mathias Buus. Version 3.6.0 of protocol-buffers-schema contains a security vulnerability, which stems from JavaScript prototype pollution. This vulnerability could allow attackers to alter application logic,...

6.5CVSS6.2AI score0.00534EPSS
Exploits0References1
Packet Storm News
Packet Storm News
added 2026/04/03 12:0 a.m.31 views

ML Defender (ARGus NDR): An Open-Source Embedded ML NIDS for Botnet and Anomalous Traffic Detection in Resource-Constrained Organizations

Ransomware and DDoS attacks disproportionately impact hospitals, schools, and small organizations that cannot afford enterprise security solutions. We present ML Defender aRGus NDR, an open-source network intrusion detection system built in C++20, deployable on commodity hardware at approximately...

5.9AI score
Exploits0
Atlassian
Atlassian
added 2026/03/26 10:29 p.m.5 views

RCE (Remote Code Execution) com.google.protobuf:protobuf-java Dependency in Crucible Server

This High severity RCE Remote Code Execution vulnerability was introduced in version 4.9.0 of Crucible Server. This RCE Remote Code Execution vulnerability, with a CVSS Score of 8.7 and a CVSS Vector of CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N allows an unauthenticated...

8.7CVSS7.4AI score0.02772EPSS
Exploits1
RedHat Linux
RedHat Linux
added 2026/03/18 1:54 p.m.11 views

protobuf: StackOverflow vulnerability in Protocol Buffers

A flaw was found in Protocol Buffers protobuf. This issue can allows an attacker to cause a StackOverflow via parsing untrusted Protocol Buffers data containing arbitrarily nested SGROUP tags, leading to unbounded recursion...

8.7CVSS6.8AI score0.02772EPSS
Exploits1References5
RedHat Linux
RedHat Linux
added 2026/03/18 1:19 p.m.10 views

protobuf: StackOverflow vulnerability in Protocol Buffers

A flaw was found in Protocol Buffers protobuf. This issue can allows an attacker to cause a StackOverflow via parsing untrusted Protocol Buffers data containing arbitrarily nested SGROUP tags, leading to unbounded recursion...

8.7CVSS6.8AI score0.02772EPSS
Exploits1References5
RedHat Linux
RedHat Linux
added 2026/03/18 1:17 p.m.17 views

protobuf: StackOverflow vulnerability in Protocol Buffers

A flaw was found in Protocol Buffers protobuf. This issue can allows an attacker to cause a StackOverflow via parsing untrusted Protocol Buffers data containing arbitrarily nested SGROUP tags, leading to unbounded recursion...

8.7CVSS6.8AI score0.02772EPSS
Exploits1References5
RedHat Linux
RedHat Linux
added 2026/03/18 1:17 p.m.10 views

protobuf: StackOverflow vulnerability in Protocol Buffers

A flaw was found in Protocol Buffers protobuf. This issue can allows an attacker to cause a StackOverflow via parsing untrusted Protocol Buffers data containing arbitrarily nested SGROUP tags, leading to unbounded recursion...

8.7CVSS6.8AI score0.02772EPSS
Exploits1References5
Rows per page
Query Builder