5922 matches found
CVE-2023-33552
Heap Buffer Overflow in the erofsreadonedata function at data.c in erofs-utils v1.6 allows remote attackers to execute arbitrary code via a crafted erofs filesystem image...
CVE-2023-33552
The CVE-2023-33552 issue affects erofs-utils v1.6, with a Heap Buffer Overflow in erofs_read_one_data (data.c) that can allow arbitrary code execution via a crafted erofs filesystem image. Public references in connected sources confirm the flaw and that Fedora/Mageia advisories backported fixes t...
CVE-2023-33551: Out-of-bounds Write
Heap Buffer Overflow in the erofsfsckdirentiter function in fsck/main.c in erofs-utils v1.6 allows remote attackers to execute arbitrary code via a crafted erofs filesystem image...
Moderate: Red Hat Security Advisory: Migration Toolkit for Runtimes security update
Migration Toolkit for Runtimes 1.1.0 release Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the...
Malicious code in rfs-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 79e642edac55949b293591df1c51b8e8739ca1dd2e99f7e82b235b168287179d The OpenSSF Package Analysis project identified 'rfs-utils' @ 100.100.101 npm as malicious. It is considered malicious because: - The package...
MAL-2023-1285 Malicious code in rfs-utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 79e642edac55949b293591df1c51b8e8739ca1dd2e99f7e82b235b168287179d The OpenSSF Package Analysis project identified 'rfs-utils' @ 100.100.101 npm as malicious. It is considered malicious because: - The package...
Prototype Pollution
@antfu/utils is vulnerable to Prototype Pollution. The vulnerability exists due lack of sanization in the deepMerge function of object.js which allows an attacker to inject and modify malicious properties such as proto, resulting in prototype pollution...
@0x-jerry/x-release (>=0.0.2, <=0.3.6), @_igetter/yxtvant (>=1.0.1, <=1.0.2) +451 more potentially affected by CVE-2023-2972 via @antfu/utils (>=0.1.7, <=0.7.2)
@antfu/utils NPM version =0.1.7, =0.0.2, =1.0.1, =1.1.10, =0.0.2, =1.0.0-rc2, =0.0.0, =1.15.0, =0.3.0-beta.2, =0.5.3, =1.6.24, =1.0.2, =0.1.1, =0.1.1, =0.1.9 and more Source cves: CVE-2023-2972 Source advisory: OSV:GHSA-P2FH-2H23-6GRG...
CVE-2023-2972
Prototype Pollution in GitHub repository antfu/utils prior to 0.7.3...
CVE-2023-2972
Prototype Pollution in GitHub repository antfu/utils prior to 0.7.3...
Code injection
Prototype Pollution in GitHub repository antfu/utils prior to 0.7.3...
utils 安全漏洞
utils is a utility program by Fred Smith Personal Developer. A security vulnerability exists in versions of utils prior to 0.7.3 that stems from the presence of prototype contamination...
CVE-2023-2972
Prototype Pollution in GitHub repository antfu/utils prior to 0.7.3...
CVE-2023-2972 Prototype Pollution in antfu/utils
Prototype Pollution in GitHub repository antfu/utils prior to 0.7.3...
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
Prototype Pollution in GitHub repository antfu/utils prior to 0.7.3...
CVE-2023-2972 Prototype Pollution in antfu/utils
Prototype Pollution in GitHub repository antfu/utils prior to 0.7.3...
PT-2023-22371 · Unknown · Antfu/Utils
Name of the Vulnerable Software and Affected Versions: antfu/utils versions prior to 0.7.3 Description: The issue is related to Prototype Pollution in the GitHub repository antfu/utils. Recommendations: For versions prior to 0.7.3, update to version 0.7.3 or later to resolve the issue...
CVE-2023-2972
CVE-2023-2972 describes a prototype pollution vulnerability in the GitHub repository antfu/utils prior to 0.7.3. The issue is confirmed across multiple sources (NVD/OSV/GHSA) as a prototype contamination in the utility’s codebase. Reported impact in the CVE data indicates high-level risk, but the...