Lucene search
+L

76 matches found

OSV
OSV
added 2024/07/01 1:15 p.m.7 views

CVE-2024-38997

adolphdudu ratio-swiper v0.0.2 was discovered to contain a prototype pollution via the function extendDefaults. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

6.5CVSS6.1AI score
SaveExploits0References1
Cvelist
Cvelist
added 2024/07/01 12:0 a.m.24 views

CVE-2024-39853

adolphdudu ratio-swiper 0.0.2 was discovered to contain a prototype pollution via the function parse. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

0.00521EPSS
SaveExploits1References1
CNNVD
CNNVD
added 2024/07/01 12:0 a.m.5 views

Swiper Security Vulnerabilities

Swiper is a free mobile touch slider by Vladimir Kharlampidi personal developer. It is intended for use in mobile websites, mobile web applications and mobile native applications. A security vulnerability exists in Swiper version v0.0.2, which stems from the inclusion of prototype contamination v...

6.5CVSS7.7AI score0.00462EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2024/07/01 12:0 a.m.7 views

Swiper Security Vulnerabilities

Swiper is a free mobile touch slider by Vladimir Kharlampidi personal developer. It is intended for use in mobile websites, mobile web applications and mobile native applications. A security vulnerability exists in Swiper version v0.0.2, which stems from the inclusion of prototype contamination v...

6.5CVSS7.7AI score0.00386EPSS
SaveExploits0References2
GitLab Advisory Database
GitLab Advisory Database
added 2024/07/01 12:0 a.m.19 views

adolph_dudu ratio-swiper was discovered to contain a prototype pollution via the function extendDefaults

adolphdudu ratio-swiper v0.0.2 was discovered to contain a prototype pollution via the function extendDefaults. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

6.5CVSS8.2AI score0.00462EPSS
SaveExploits1References4Affected Software1
CVE
CVE
added 2024/07/01 12:0 a.m.52 views

CVE-2024-39853

The CVE-2024-39853 entry concerns the ratio-swiper library by adolph_dudu, version 0.0.2. The root cause is a prototype pollution vulnerability in the parse function, which could enable an attacker to inject arbitrary properties into objects and potentially alter behavior of objects inheriting fr...

6.5CVSS8.3AI score0.00521EPSS
SaveExploits1References1Affected Software1
CNNVD
CNNVD
added 2024/07/01 12:0 a.m.5 views

Swiper Security Vulnerabilities

Swiper is a free mobile touch slider by Vladimir Kharlampidi personal developer. It is intended for use in mobile websites, mobile web applications and mobile native applications. A security vulnerability exists in Swiper version 0.0.2, which stems from inclusion of prototype contamination via...

6.5CVSS7.7AI score0.00521EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2024/07/01 12:0 a.m.8 views

PT-2024-28701 · Unknown · Ratio-Swiper

Name of the Vulnerable Software and Affected Versions: ratio-swiper version 0.0.2 Description: The issue allows attackers to execute arbitrary code or cause a Denial of Service DoS by injecting arbitrary properties via the parse function, which is vulnerable to prototype pollution. Recommendation...

6.5CVSS7.3AI score0.00521EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2024/07/01 12:0 a.m.15 views

CVE-2024-38997

adolphdudu ratio-swiper v0.0.2 was discovered to contain a prototype pollution via the function extendDefaults. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

8.2AI score0.00462EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2024/07/01 12:0 a.m.13 views

CVE-2024-39000

adolphdudu ratio-swiper v0.0.2 was discovered to contain a prototype pollution via the function parse. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

8.2AI score0.00386EPSS
SaveExploits0References1
CVE
CVE
added 2024/07/01 12:0 a.m.49 views

CVE-2024-38997

CVE-2024-38997 affects the adolph_dudu ratio-swiper package (v0.0.2). The issue is a prototype pollution vulnerability in the extendDefaults function, enabling attackers to inject arbitrary properties and potentially execute arbitrary code or trigger a Denial of Service (DoS). Public details cove...

6.5CVSS8.3AI score0.00462EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2024/07/01 12:0 a.m.23 views

CVE-2024-39000

adolphdudu ratio-swiper v0.0.2 was discovered to contain a prototype pollution via the function parse. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

0.00386EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/07/01 12:0 a.m.22 views

CVE-2024-38997

adolphdudu ratio-swiper v0.0.2 was discovered to contain a prototype pollution via the function extendDefaults. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

0.00462EPSS
SaveExploits1References1
CVE
CVE
added 2024/07/01 12:0 a.m.53 views

CVE-2024-39000

Prototype pollution in adolph_dudu ratio-swiper v0.0.2 is caused by the parse function, enabling attackers to inject arbitrary properties that can lead to arbitrary code execution or DoS. Multiple sources (NVD, Red Hat, CNNVD, CVE/CVE-List, PT-Guard) confirm the issue and affected component. The ...

6.5CVSS8.3AI score0.00386EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/07/01 12:0 a.m.16 views

CVE-2024-39853

adolphdudu ratio-swiper 0.0.2 was discovered to contain a prototype pollution via the function parse. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

8.2AI score0.00521EPSS
SaveExploits1References1
OSV
OSV
added 2024/01/10 1:56 a.m.16 views

MAL-2024-58 Malicious code in @linesearch/swiper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2bf049c370e7e561754761d16016b5184a0b073ee8d521bbd4f23df8f129a417 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/01/10 1:56 a.m.3 views

Malicious code in @linesearch/swiper (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2bf049c370e7e561754761d16016b5184a0b073ee8d521bbd4f23df8f129a417 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/07/06 6:59 p.m.9 views

MAL-2022-6377 Malicious code in swiper-bundle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b97df99e38008c85b965c6dbc9277f1c08a98288578d244c25a5eb8d2d853d5c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/07/06 6:59 p.m.5 views

Malicious code in swiper-bundie (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b5e1b659b47e3a72ea3f7e5f575acb49c0035c7a26095e57423c15e594d0161d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References2
OSSF Malicious Packages
OSSF Malicious Packages
added 2022/07/06 6:59 p.m.8 views

Malicious code in swiper-bundle (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b97df99e38008c85b965c6dbc9277f1c08a98288578d244c25a5eb8d2d853d5c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References2
Rows per page
Query Builder