Lucene search
+L

19 matches found

Veracode
Veracode
•added 2024/07/02 7:10 a.m.•29 views

Prototype Pollution

adolphdudu/ratio-swiper is vulnerable to Prototype Pollution. The vulnerability is due to by passing crafted arguments with the proto property using functions like extendDefaults and parse. The vulnerability allows attackers to alter the behavior of all objects inheriting from the affected...

6.5CVSS6.8AI score0.00521EPSS
SaveExploits1References2Affected Software1
Github Security Blog
Github Security Blog
•added 2024/07/01 3:32 p.m.•23 views

adolph_dudu ratio-swiper was discovered to contain a prototype pollution via the function extendDefaults

adolphdudu ratio-swiper v0.0.2 was discovered to contain a prototype pollution via the function extendDefaults. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

6.5CVSS8.2AI score0.00463EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2024/07/01 3:32 p.m.•37 views

GHSA-88VR-HJQX-57QH adolph_dudu ratio-swiper was discovered to contain a prototype pollution via the function extendDefaults

adolphdudu ratio-swiper v0.0.2 was discovered to contain a prototype pollution via the function extendDefaults. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

6.5CVSS6.9AI score0.00463EPSS
SaveExploits1References3
NVD
NVD
•added 2024/07/01 1:15 p.m.•28 views

CVE-2024-39853

adolphdudu ratio-swiper 0.0.2 was discovered to contain a prototype pollution via the function parse. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

6.5CVSS0.00521EPSS
SaveExploits1References1
NVD
NVD
•added 2024/07/01 1:15 p.m.•27 views

CVE-2024-39000

adolphdudu ratio-swiper v0.0.2 was discovered to contain a prototype pollution via the function parse. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

6.5CVSS0.00386EPSS
SaveExploits0References1
NVD
NVD
•added 2024/07/01 1:15 p.m.•25 views

CVE-2024-38997

adolphdudu ratio-swiper v0.0.2 was discovered to contain a prototype pollution via the function extendDefaults. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

6.5CVSS0.00463EPSS
SaveExploits1References1
GitLab Advisory Database
GitLab Advisory Database
•added 2024/07/01 12:00 a.m.•25 views

adolph_dudu ratio-swiper was discovered to contain a prototype pollution via the function extendDefaults

adolphdudu ratio-swiper v0.0.2 was discovered to contain a prototype pollution via the function extendDefaults. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

6.5CVSS8.2AI score0.00463EPSS
SaveExploits1References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/01 12:00 a.m.•1 views

CVE-2024-39853: Improperly Controlled Modification of Object Prototype Attributes

adolphdudu ratio-swiper 0.0.2 was discovered to contain a prototype pollution via the function parse. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

6.5CVSS6.5AI score0.00521EPSS
SaveExploits1References1
CVE
CVE
•added 2024/07/01 12:00 a.m.•67 views

CVE-2024-39853

The adolph_dudu ratio-swiper version 0.0.2 is vulnerable to prototype pollution due to the parse function. Attackers can exploit this by passing crafted arguments with the proto property (or through functions like extendDefaults ) to inject arbitrary properties. This vulnerability allows for arbi...

6.5CVSS8.3AI score0.00521EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2024/07/01 12:00 a.m.•34 views

CVE-2024-39853

adolphdudu ratio-swiper 0.0.2 was discovered to contain a prototype pollution via the function parse. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

0.00521EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/07/01 12:00 a.m.•20 views

CVE-2024-38997

adolphdudu ratio-swiper v0.0.2 was discovered to contain a prototype pollution via the function extendDefaults. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

8.2AI score0.00463EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/01 12:00 a.m.•4 views

CVE-2024-38997: Improperly Controlled Modification of Object Prototype Attributes

adolphdudu ratio-swiper v0.0.2 was discovered to contain a prototype pollution via the function extendDefaults. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

6.5CVSS6.5AI score0.00463EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/01 12:00 a.m.•4 views

CVE-2024-39000: Improperly Controlled Modification of Object Prototype Attributes

adolphdudu ratio-swiper v0.0.2 was discovered to contain a prototype pollution via the function parse. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

6.5CVSS6.5AI score0.00386EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/07/01 12:00 a.m.•15 views

CVE-2024-39000

adolphdudu ratio-swiper v0.0.2 was discovered to contain a prototype pollution via the function parse. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

8.2AI score0.00386EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/07/01 12:00 a.m.•22 views

CVE-2024-39853

adolphdudu ratio-swiper 0.0.2 was discovered to contain a prototype pollution via the function parse. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

8.2AI score0.00521EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/07/01 12:00 a.m.•31 views

CVE-2024-39000

adolphdudu ratio-swiper v0.0.2 was discovered to contain a prototype pollution via the function parse. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

0.00386EPSS
SaveExploits0References1
CVE
CVE
•added 2024/07/01 12:00 a.m.•57 views

CVE-2024-38997

The adolph_dudu ratio-swiper library, specifically version v0.0.2 , is vulnerable to prototype pollution through the extendDefaults function. This flaw allows an attacker to inject arbitrary properties, potentially leading to arbitrary code execution or a Denial of Service (DoS) . As a temporary ...

6.5CVSS8.3AI score0.00463EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2024/07/01 12:00 a.m.•64 views

CVE-2024-39000

The ratio-swiper library (v0.0.2) by adolph_dudu is vulnerable to a prototype pollution flaw within the parse function. This vulnerability allows an attacker to inject arbitrary properties, potentially leading to arbitrary code execution or a Denial of Service (DoS) . As a temporary workaround, i...

6.5CVSS8.3AI score0.00386EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2024/07/01 12:00 a.m.•28 views

CVE-2024-38997

adolphdudu ratio-swiper v0.0.2 was discovered to contain a prototype pollution via the function extendDefaults. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

0.00463EPSS
SaveExploits1References1
Rows per page
Query Builder