Lucene search
+L

1108 matches found

Positive Technologies
Positive Technologies
added 2022/10/31 12:0 a.m.5 views

PT-2022-24033 · Npm · Browserify-Shim

Name of the Vulnerable Software and Affected Versions: browserify-shim version 3.8.15 Description: The issue is related to a prototype pollution vulnerability in the resolveShims function, located in the resolve-shims.js file. This vulnerability is exploitable via the shimPath variable in...

9.8CVSS9.1AI score0.01136EPSS
SaveExploits1References10
CNNVD
CNNVD
added 2022/10/31 12:0 a.m.6 views

browserify-shim 品安全漏洞

browserify-shim is the thlorenz personal developer's tool for making CommonJS-incompatible files browsable. A security vulnerability exists in browserify-shim version 3.8.15, which originates from a prototype chain contamination that can be caused by an attacker via the shimPath variable in the...

9.8CVSS8.2AI score0.01136EPSS
SaveExploits1References4
OSV
OSV
added 2022/10/31 12:0 a.m.20 views

CVE-2022-37623

Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the shimPath variable in resolve-shims.js...

9.8CVSS6.9AI score0.01136EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2022/10/31 12:0 a.m.38 views

CVE-2022-37623

Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the shimPath variable in resolve-shims.js...

9.7AI score0.01136EPSS
SaveExploits1References3
OSV
OSV
added 2022/10/29 12:0 p.m.26 views

GHSA-R737-347M-WQC7 thlorenz browserify-shim vulnerable to prototype pollution

Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the fullPath variable in resolve-shims.js...

9.8CVSS9.5AI score0.01032EPSS
SaveExploits0References7
Github Security Blog
Github Security Blog
added 2022/10/29 12:0 p.m.18 views

thlorenz browserify-shim vulnerable to prototype pollution

Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the fullPath variable in resolve-shims.js...

9.8CVSS9.5AI score0.01032EPSS
SaveExploits0References7Affected Software1
NVD
NVD
added 2022/10/28 8:15 p.m.89 views

CVE-2022-37621

Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the fullPath variable in resolve-shims.js...

9.8CVSS0.01032EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2022/10/28 12:0 a.m.4 views

browserify-shim 安全漏洞

browserify-shim is used by thlorenz individual developers to make CommonJS incompatible files browsable. A security vulnerability exists in browserify-shim version 3.8.15, which stems from a prototype contamination vulnerability in the resolveShims function in resolve-shims.js...

9.8CVSS8.2AI score0.01032EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2022/10/28 12:0 a.m.4 views

CVE-2022-37621

Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the fullPath variable in resolve-shims.js...

9.5AI score0.01032EPSS
SaveExploits0References3
CVE
CVE
added 2022/10/28 12:0 a.m.72 views

CVE-2022-37621

CVE-2022-37621 affects thlorenz browserify-shim 3.8.15, with a prototype pollution in resolve-shims.js (resolveShims) exploitable via the fullPath variable. Risk details from sources indicate a CRITICAL impact (CVSSv3.1: 9.8) and network access are possible, with no user interaction required. Rem...

9.8CVSS9.4AI score0.01032EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2022/10/28 12:0 a.m.47 views

CVE-2022-37621

Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the fullPath variable in resolve-shims.js...

9.7AI score0.01032EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2022/10/28 12:0 a.m.8 views

PT-2022-24032 · Unknown · Browserify-Shim

Name of the Vulnerable Software and Affected Versions: browserify-shim version 3.8.15 Description: The issue is related to a prototype pollution vulnerability in the resolveShims function, located in resolve-shims.js. This vulnerability is exploitable via the fullPath variable in resolve-shims.js...

9.8CVSS9.1AI score0.01032EPSS
SaveExploits0References9
OpenVAS
OpenVAS
added 2022/10/28 12:0 a.m.11 views

Huawei EulerOS: Security Advisory for shim (EulerOS-SA-2022-2635)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.9AI score0.00326EPSS
SaveExploits0References2
OSV
OSV
added 2022/10/28 12:0 a.m.35 views

CVE-2022-37621

Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the fullPath variable in resolve-shims.js...

9.8CVSS6.9AI score0.01032EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2022/10/27 12:0 a.m.15 views

EulerOS 2.0 SP3 : shim (EulerOS-SA-2022-2635)

According to the versions of the shim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - shim: Buffer overflow when loading crafted EFI images CVE-2022-28737 Note that Tenable Network Security has extracted the preceding description...

7.8CVSS7.1AI score0.00326EPSS
SaveExploits0References2
Veracode
Veracode
added 2022/10/19 2:58 a.m.21 views

Prototype Pollution

browserify-shim is vulnerable to prototype pollution. The vulnerability exists due to the separateExposeGlobals function in resolve-shims.js, which doesn’t restrict proto or constructor keys in the supplied shim which allows an attacker to modify object prototypes...

9.8CVSS8.8AI score0.01186EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2022/10/12 12:0 p.m.12 views

GHSA-866W-WM4H-95C6 thlorenz browserify-shim vulnerable to prototype pollution

Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the k variable in resolve-shims.js...

9.8CVSS9.4AI score0.01186EPSS
SaveExploits1References7
Github Security Blog
Github Security Blog
added 2022/10/12 12:0 p.m.26 views

thlorenz browserify-shim vulnerable to prototype pollution

Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the k variable in resolve-shims.js...

9.8CVSS9.5AI score0.01186EPSS
SaveExploits1References7Affected Software1
OpenVAS
OpenVAS
added 2022/10/12 12:0 a.m.11 views

Huawei EulerOS: Security Advisory for shim (EulerOS-SA-2022-2591)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.9AI score0.00326EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/10/11 11:15 p.m.3 views

CVE-2022-37617

Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the k variable in resolve-shims.js...

9.8CVSS7.3AI score0.01186EPSS
SaveExploits1References4
Rows per page
Query Builder