Lucene search
+L

128 matches found

NVD
NVD
•added 2019/12/06 11:15 p.m.•21 views

CVE-2019-10769

safer-eval is a npm package to sandbox the he evaluation of code used within the eval function. Affected versions of this package are vulnerable to Arbitrary Code Execution via generating a RangeError...

9.8CVSS9.7AI score0.02595EPSS
SaveExploits1References2
OSV
OSV
•added 2019/12/06 11:15 p.m.•14 views

CVE-2019-10769

safer-eval is a npm package to sandbox the he evaluation of code used within the eval function. Affected versions of this package are vulnerable to Arbitrary Code Execution via generating a RangeError...

9.8CVSS7.4AI score0.02595EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2019/12/06 10:49 p.m.•32 views

CVE-2019-10769

safer-eval is a npm package to sandbox the he evaluation of code used within the eval function. Affected versions of this package are vulnerable to Arbitrary Code Execution via generating a RangeError...

9.7AI score0.02595EPSS
SaveExploits1References2
Mend
Mend
•added 2019/12/06 10:49 p.m.•1 views

CVE-2019-10769

safer-eval is a npm package to sandbox the he evaluation of code used within the eval function. Affected versions of this package are vulnerable to Arbitrary Code Execution via generating a RangeError...

9.8CVSS0.02595EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/12/06 12:00 a.m.•3 views

CVE-2019-10769: Improper Control of Generation of Code

safer-eval is a npm package to sandbox the he evaluation of code used within the eval function. Affected versions of this package are vulnerable to Arbitrary Code Execution via generating a RangeError...

9.8CVSS8.1AI score0.02595EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2019/12/06 12:00 a.m.•1 views

PT-2019-12041

Name of the Vulnerable Software and Affected Versions safer-eval versions all Description The issue concerns the safer-eval npm package, which is used to sandbox the evaluation of code within the eval function. It is vulnerable to Arbitrary Code Execution via generating a RangeError and Sandbox...

9.8CVSS0.02595EPSS
SaveExploits1References7
nodejs
nodejs
•added 2019/09/23 6:35 p.m.•21 views

Sandbox Breakout

Overview Versions of realms-shim prior to 1.2.0 are vulnerable to a Sandbox Breakout. The package's core evaluator, which must switch between "unsafe mode" and "safe mode" for each call, could be left in "unsafe mode" if an attacker is able to force a RangeError in a specific timeframe. This woul...

6.8AI score
SaveExploits0Affected Software1
seebug.org
seebug.org
•added 2017/04/24 12:00 a.m.•40 views

Chrome Universal XSS using stack overflow exceptions (CVE-2015-1303)

VULNERABILITY DETAILS When the maximum call stack size is exceeded, a RangeError object is created using isolate's current context. Thus, if a cross-origin context had been entered through the V8WrapperInstantiationScope constructor, for example, a cross-origin exception will be propagated to the...

7.5CVSS9.1AI score0.01729EPSS
SaveExploits1
Rows per page
Query Builder