1filecompiler (0.0.2), @adrian.u/adritoolbox (>=1.0.0, <=1.1.0) +797 more potentially affected by CVE-2020-8147 via utils-extend (1.0.8)

utils-extend NPM version 1.0.8 is affected by a known vulnerability. The following packages have a transitive dependency on utils-extend and may be impacted: - 1filecompiler 0.0.2 - @adrian.u/adritoolbox =1.0.0, =0.1.1, =0.1.0, =0.1.0, =1.0.2, =0.1.0, =0.0.1, =0.37.8, =1.0.1, =0.1.0, =1.0.2,...

GHSA-RFFP-MC78-WJF7 Command Injection in cocos-utils

All versions of cocos-utils are vulnerable to Remote Code Execution. The unzip function concatenates user input to exec which may allow attackers to execute arbitrary commands on the server. Recommendation No fix is currently available. Consider using an alternative module until a fix is made...

Prototype Pollution

nodee-utils is vulnerable to prototype pollution. The vulnerability exists as it does not restrict the proto header to be set through the deepSet function...

PT-2020-21488

Name of the Vulnerable Software and Affected Versions cocos-utils versions affected versions not specified Description The issue allows for Remote Code Execution. It is caused by the unzip function concatenating user input to exec, which may enable attackers to execute arbitrary commands on the...

CVE-2020-7722

All versions of package nodee-utils are vulnerable to Prototype Pollution via the deepSet function...

Design/Logic Flaw

All versions of package nodee-utils are vulnerable to Prototype Pollution via the deepSet function...

CVE-2020-7722 Prototype Pollution

All versions of package nodee-utils are vulnerable to Prototype Pollution via the deepSet function...

CVE-2020-7722

All versions of package nodee-utils are vulnerable to Prototype Pollution via the deepSet function...

CVE-2020-7722

All versions of package nodee-utils are vulnerable to Prototype Pollution via the deepSet function...

CVE-2020-7722: Improperly Controlled Modification of Object Prototype Attributes

All versions of package nodee-utils are vulnerable to Prototype Pollution via the deepSet function...

PT-2020-19743 · Node.Js · Nodee-Utils

Name of the Vulnerable Software and Affected Versions: nodee-utils versions prior to 1.2.3 Description: The issue concerns Prototype Pollution via the deepSet function. This allows for potential manipulation of object properties, which can lead to various security issues. Recommendations: For...

butchershop (0.1.0-pre), grunt-butchershop (0.2.1) +2 more potentially affected by CVE-2014-4671 via hapi (6.0.2)

hapi NPM version 6.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on hapi and may be impacted: - butchershop 0.1.0-pre - grunt-butchershop 0.2.1 - hapi-level =0.0.3, =0.0.7 - rutha-utils 0.1.0 Source cves: CVE-2014-4671 Source advisory:...

butchershop (0.1.0-pre), grunt-butchershop (0.2.1) +2 more potentially affected by CVE-2014-4671 via hapi (6.0.2)

hapi NPM version 6.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on hapi and may be impacted: - butchershop 0.1.0-pre - grunt-butchershop 0.2.1 - hapi-level =0.0.3, =0.0.7 - rutha-utils 0.1.0 Source cves: CVE-2014-4671 Source advisory:...

Huawei EulerOS: Security Advisory for nfs-utils (EulerOS-SA-2020-1871)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP8 : nfs-utils (EulerOS-SA-2020-1871)

According to the version of the nfs-utils packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The nfs-utils package in SUSE Linux Enterprise Server 12 before and including version 1.3.0-34.18.1 and in SUSE Linux Enterprise Server 15 befor...

CVE-2020-7703

All versions of package nis-utils are vulnerable to Prototype Pollution via the setValue function...

CVE-2020-7703

All versions of package nis-utils are vulnerable to Prototype Pollution via the setValue function...

Design/Logic Flaw

All versions of package nis-utils are vulnerable to Prototype Pollution via the setValue function...

CVE-2020-7703

All versions of package nis-utils are vulnerable to Prototype Pollution via the setValue function...

CVE-2020-7703 Prototype Pollution

All versions of package nis-utils are vulnerable to Prototype Pollution via the setValue function...