Lucene search
K

8 matches found

RedhatCVE
RedhatCVE
added 2025/05/23 9:5 a.m.1 views

CVE-2024-38994

amoyjs amoy common v1.0.10 was discovered to contain a prototype pollution via the function extend. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

7.3CVSS6.2AI score0.00296EPSS
Exploits1References1
Veracode
Veracode
added 2024/07/02 7:13 a.m.8 views

Prototype Pollution

@amoy/common is vulnerable to prototype pollution. The vulnerability is due to setValue function, potentially allowing attackers to execute arbitrary code or cause a Denial of Service DoS by injecting arbitrary properties...

7.3CVSS7.8AI score0.0008EPSS
Exploits0References1Affected Software1
Veracode
Veracode
added 2024/07/02 6:17 a.m.6 views

Prototype Pollution

@amoy/common is vulnerable to Prototype Pollution. The vulnerability is due to functions like extend and setValue, which can be exploited by passing crafted arguments with a proto property. This allows attackers to alter the behavior of all objects inheriting from the affected prototype...

7.3CVSS6.7AI score0.00296EPSS
Exploits1References2Affected Software1
vulnersOsv
vulnersOsv
added 2024/07/01 3:32 p.m.3 views

@amoy/animate (>=0.1.0 <=0.1.8), @amoy/query (>=0.1.1 <=0.4.3) +4 more potentially affected by CVE-2024-38994 via @amoy/common (=1.0.10)

@amoy/common NPM version =1.0.10 is affected by a known vulnerability. The following packages have a transitive dependency on @amoy/common and may be impacted: - @amoy/animate =0.1.0, =0.1.1, =1.0.0, =0.1.0, =1.0.1, =1.0.42 - react-webgl.js =0.0.1 Source cves: CVE-2024-38994 Source advisory:...

7.3CVSS5.8AI score0.00296EPSS
Exploits1
OSV
OSV
added 2024/07/01 1:15 p.m.2 views

CVE-2024-39003

amoyjs amoy common v1.0.10 was discovered to contain a prototype pollution via the function setValue. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

7.3CVSS6.1AI score
Exploits0References1
OSV
OSV
added 2024/07/01 1:15 p.m.0 views

CVE-2024-38994

amoyjs amoy common v1.0.10 was discovered to contain a prototype pollution via the function extend. This vulnerability allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties...

7.3CVSS6.1AI score0.00296EPSS
Exploits1References1
CNNVD
CNNVD
added 2024/07/01 12:0 a.m.1 views

amoy common Security Vulnerabilities

amoy common is a library in amoyjs open source. A security vulnerability exists in amoy common v1.0.10, which stems from prototype contamination via the function setValue, allowing an attacker to execute arbitrary code or cause a denial of service DoS by injecting arbitrary properties...

7.3CVSS7.7AI score0.0008EPSS
Exploits0References2
CNNVD
CNNVD
added 2024/07/01 12:0 a.m.1 views

amoy common Security Vulnerabilities

amoy common is an amoyjs open source library. A security vulnerability exists in amoy common v1.0.10, which stems from a prototype contamination via the function extend that allows an attacker to execute arbitrary code or cause a denial of service DoS by injecting arbitrary attributes...

7.3CVSS7.7AI score0.00296EPSS
Exploits1References2
Rows per page
Query Builder