Lucene search
+L

3384 matches found

OSV
OSV
added 2022/10/18 5:0 p.m.9 views

UBUNTU-CVE-2022-39253

Git is an open source, scalable, distributed revision control system. Versions prior to 2.30.6, 2.31.5, 2.32.4, 2.33.5, 2.34.5, 2.35.5, 2.36.3, and 2.37.4 are subject to exposure of sensitive information to a malicious actor. When performing a local clone where the source and target of the clone...

5.5CVSS6.6AI score0.01278EPSS
SaveExploits1References5
UbuntuCve
UbuntuCve
added 2022/10/18 5:0 p.m.47 views

CVE-2022-39253

Git is an open source, scalable, distributed revision control system. Versions prior to 2.30.6, 2.31.5, 2.32.4, 2.33.5, 2.34.5, 2.35.5, 2.36.3, and 2.37.4 are subject to exposure of sensitive information to a malicious actor. When performing a local clone where the source and target of the clone...

5.5CVSS6.6AI score0.01278EPSS
SaveExploits1References4
OSV
OSV
added 2022/10/17 4:15 p.m.5 views

UBUNTU-CVE-2022-3283

A potential DOS vulnerability was discovered in GitLab CE/EE affecting all versions before before 15.2.5, all versions starting from 15.3 before 15.3.4, all versions starting from 15.4 before 15.4.1 While cloning an issue with special crafted content added to the description could have been used ...

7.5CVSS7.1AI score0.01363EPSS
SaveExploits1References2
Veracode
Veracode
added 2022/09/30 7:47 a.m.22 views

Prototype Pollution

@hapi/hoek is vulnerable to prototype pollution. The function internals.clone allows an attacker to get control of value of “path” and modify attributes such as proto, constructor and prototype...

8.1CVSS7.9AI score0.00986EPSS
SaveExploits0References2Affected Software1
hivepro
hivepro
added 2022/09/26 6:35 a.m.102 views

Zero-Day vulnerability in WPGateway Plugin compromises WordPress sites

Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary The recently uncovered CVE-2022-3180 zero-day vulnerability allows an unauthenticated attacker to add an administrator account to WPGateway-powered websites. WPGateway is a commercial plugin that...

3.7AI score0.0921EPSS
SaveExploits2
Github Security Blog
Github Security Blog
added 2022/09/25 12:0 a.m.141 views

hoek subject to prototype pollution via the clone function.

hoek versions prior to 8.5.1, and 9.x prior to 9.0.3 are vulnerable to prototype pollution in the clone function. If an object with the proto key is passed to clone the key is converted to a prototype. This issue has been patched in version 9.0.3, and backported to 8.5.1...

8.1CVSS7.8AI score0.00986EPSS
SaveExploits0References5Affected Software2
OSV
OSV
added 2022/09/25 12:0 a.m.19 views

GHSA-C429-5P7V-VGJP hoek subject to prototype pollution via the clone function.

hoek versions prior to 8.5.1, and 9.x prior to 9.0.3 are vulnerable to prototype pollution in the clone function. If an object with the proto key is passed to clone the key is converted to a prototype. This issue has been patched in version 9.0.3, and backported to 8.5.1...

8.1CVSS6.9AI score0.00986EPSS
SaveExploits0References4
NVD
NVD
added 2022/09/23 6:15 a.m.18 views

CVE-2020-36604

hoek before 8.5.1 and 9.x before 9.0.3 allows prototype poisoning in the clone function...

8.1CVSS0.00986EPSS
SaveExploits0References2
OSV
OSV
added 2022/09/23 6:15 a.m.4 views

DEBIAN-CVE-2020-36604

hoek before 8.5.1 and 9.x before 9.0.3 allows prototype poisoning in the clone function...

8.1CVSS7.7AI score0.00986EPSS
SaveExploits0References1
Prion
Prion
added 2022/09/23 6:15 a.m.20 views

Design/Logic Flaw

hoek before 8.5.1 and 9.x before 9.0.3 allows prototype poisoning in the clone function...

5.1CVSS7.9AI score0.00986EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2022/09/23 6:15 a.m.8 views

UBUNTU-CVE-2020-36604

hoek before 8.5.1 and 9.x before 9.0.3 allows prototype poisoning in the clone function...

8.1CVSS7.1AI score0.00986EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2022/09/23 5:28 a.m.6 views

CVE-2020-36604

hoek before 8.5.1 and 9.x before 9.0.3 allows prototype poisoning in the clone function...

6.7AI score0.00986EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2022/09/23 5:28 a.m.51 views

CVE-2020-36604

hoek before 8.5.1 and 9.x before 9.0.3 allows prototype poisoning in the clone function...

7.9AI score0.00986EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2022/09/23 5:28 a.m.86 views

CVE-2020-36604

hoek before 8.5.1 and 9.x before 9.0.3 allows prototype poisoning in the clone function...

8.1CVSS8AI score0.00986EPSS
SaveExploits0
CNNVD
CNNVD
added 2022/09/23 12:0 a.m.8 views

hoek 安全漏洞

hoek is part of the hapi ecosystem open-sourced by hapi.js. It is designed to work seamlessly with the hapi web framework and its other components. A security vulnerability exists in hoek versions prior to 8.5.1 that stems from prototype poisoning in the clone function...

8.1CVSS7.4AI score0.00986EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2022/09/23 12:0 a.m.28 views

CVE-2020-36604

hoek before 8.5.1 and 9.x before 9.0.3 allows prototype poisoning in the clone function...

8.1CVSS7.1AI score0.00986EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2022/09/07 12:0 a.m.3 views

PT-2022-23156

Name of the Vulnerable Software and Affected Versions Poetry versions prior to 1.1.9 Poetry versions prior to 1.2.0b1 Description Poetry is a dependency manager for Python that uses various commands, such as git clone, when handling dependencies from a Git repository. The commands are constructed...

7.3CVSS7.2AI score0.01413EPSS
SaveExploits1References19
ATTACKERKB
ATTACKERKB
added 2022/08/25 3:15 p.m.3 views

CVE-2022-37100

H3C H200 H200V100R004 was discovered to contain a stack overflow via the function UpdateMacClone...

9.8CVSS7.4AI score0.01033EPSS
SaveExploits1References2
OSV
OSV
added 2022/08/25 2:15 p.m.8 views

CVE-2022-37068

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateMacCloneFinal...

9.8CVSS5.8AI score0.01032EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2022/08/25 2:15 p.m.5 views

CVE-2022-37068

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function UpdateMacCloneFinal...

9.8CVSS7.4AI score0.01032EPSS
SaveExploits1References2
Rows per page
Query Builder