5153 matches found
Design/Logic Flaw
All versions of package nodee-utils are vulnerable to Prototype Pollution via the deepSet function...
CVE-2020-7722 Prototype Pollution
All versions of package nodee-utils are vulnerable to Prototype Pollution via the deepSet function...
CVE-2020-7722: Improperly Controlled Modification of Object Prototype Attributes
All versions of package nodee-utils are vulnerable to Prototype Pollution via the deepSet function...
PT-2020-19743 · Node.Js · Nodee-Utils
Name of the Vulnerable Software and Affected Versions: nodee-utils versions prior to 1.2.3 Description: The issue concerns Prototype Pollution via the deepSet function. This allows for potential manipulation of object properties, which can lead to various security issues. Recommendations: For...
butchershop (0.1.0-pre), grunt-butchershop (0.2.1) +2 more potentially affected by CVE-2014-4671 via hapi (6.0.2)
hapi NPM version 6.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on hapi and may be impacted: - butchershop 0.1.0-pre - grunt-butchershop 0.2.1 - hapi-level =0.0.3, =0.0.7 - rutha-utils 0.1.0 Source cves: CVE-2014-4671 Source advisory:...
Huawei EulerOS: Security Advisory for nfs-utils (EulerOS-SA-2020-1871)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP8 : nfs-utils (EulerOS-SA-2020-1871)
According to the version of the nfs-utils packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The nfs-utils package in SUSE Linux Enterprise Server 12 before and including version 1.3.0-34.18.1 and in SUSE Linux Enterprise Server 15 befor...
CVE-2020-7703
All versions of package nis-utils are vulnerable to Prototype Pollution via the setValue function...
Design/Logic Flaw
All versions of package nis-utils are vulnerable to Prototype Pollution via the setValue function...
CVE-2020-7703 Prototype Pollution
All versions of package nis-utils are vulnerable to Prototype Pollution via the setValue function...
CVE-2020-7703
CVE-2020-7703 affects nis-utils. Vulnerability: Prototype Pollution via the setValue function in all versions up to 0.6.10. Root cause: unsafe handling of input in setValue enabling modification of Object.prototype. Impact: high to critical potential (as per CVSS in sources) including potential D...
Prototype Pollution
Overview nis-utils is a set of useful helpers Affected versions of this package are vulnerable to Prototype Pollution via the setValue function. POC const nisUtils = require'nis-utils'; nisUtils.object.setValue, 'proto.polluted', true; console.logpolluted; Details Prototype Pollution is a...
nis-model (>=0.6.0, <=0.6.22), nis-view (>=0.1.1, <=0.1.8) potentially affected by CVE-2020-7703 via nis-utils (0.6.10)
nis-utils NPM version 0.6.10 is affected by a known vulnerability. The following packages have a transitive dependency on nis-utils and may be impacted: - nis-model =0.6.0, =0.1.1, =0.1.8 Source cves: CVE-2020-7703 Source advisory: SNYK:JS-NISUTILS-598799...
CVE-2020-7703: Improperly Controlled Modification of Object Prototype Attributes
All versions of package nis-utils are vulnerable to Prototype Pollution via the setValue function...
PT-2020-19726 · Nis-Utils · Nis-Utils
Name of the Vulnerable Software and Affected Versions: nis-utils versions up to and including 0.6.10 Description: The issue concerns Prototype Pollution via the setValue function. This affects all versions of the package up to and including 0.6.10. Recommendations: For versions up to and includin...
CVE-2020-7701
madlib-object-utils before 0.1.7 is vulnerable to Prototype Pollution via setValue...
CVE-2020-7701
madlib-object-utils before 0.1.7 is vulnerable to Prototype Pollution via setValue...
Code injection
madlib-object-utils before 0.1.7 is vulnerable to Prototype Pollution via setValue...
