Lucene search
K

9 matches found

BDU FSTEC
BDU FSTEC
added 2021/06/09 12:0 a.m.5 views

The vulnerability of the constantinople application software of Avrora Center lies in the insufficient checking of input data, allowing attackers to execute arbitrary code.

The vulnerability of the constantinople application software of Avrora Center is related to insufficient verification of input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

9.8CVSS5.9AI score
Exploits0References1Affected Software1
OSV
OSV
added 2020/07/31 4:18 p.m.3 views

GHSA-HG7C-66FF-9Q8G Sandbox bypass in constantinople

constantinople before 3.1.1 affected by a sandbox bypass...

7.1AI score
Exploits0References4
Github Security Blog
Github Security Blog
added 2020/07/31 4:18 p.m.17 views

Sandbox bypass in constantinople

constantinople before 3.1.1 affected by a sandbox bypass...

2.2AI score
Exploits0References4Affected Software1
Veracode
Veracode
added 2019/07/22 2:44 a.m.10 views

Arbitrary Code Execution

constantinople is vulnerable to Arbitrary Code Execution. The library uses Function to evaluate the code expression, allowing an attacker to attempt a sandbox bypass which can lead to arbitrary code execution...

7.3AI score
Exploits0
vulnersOsv
vulnersOsv
added 2019/06/14 4:15 p.m.6 views

04_nodeblog (=1.0.0), 10tcl (>=0.0.1 <=0.0.10) +3906 more potentially affected by unknown CVE via constantinople (>=1.0.2 <=3.0.2)

constantinople NPM version =1.0.2, =0.0.1, =1.0.1, =0.1.1, =0.0.1, =0.0.7, =1.0.23, =1.0.0, =1.0.0, =1.1.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-4VMM-MHCQ-4X9J...

5.5AI score
Exploits0
OSV
OSV
added 2019/06/14 4:15 p.m.29 views

GHSA-4VMM-MHCQ-4X9J Sandbox Bypass Leading to Arbitrary Code Execution in constantinople

Versions of constantinople prior to 3.1.1 are vulnerable to a sandbox bypass which can lead to arbitrary code execution. Recommendation Update to version 3.1.1 or later...

10CVSS7.7AI score
Exploits0References4
Github Security Blog
Github Security Blog
added 2019/06/14 4:15 p.m.45 views

Sandbox Bypass Leading to Arbitrary Code Execution in constantinople

Versions of constantinople prior to 3.1.1 are vulnerable to a sandbox bypass which can lead to arbitrary code execution. Recommendation Update to version 3.1.1 or later...

6AI score
Exploits0References5Affected Software1
Node.js
Node.js
added 2018/04/20 9:33 p.m.2010 views

Sandbox Bypass Leading to Arbitrary Code Execution

Overview Versions of constantinople prior to 3.1.1 are vulnerable to a sandbox bypass which can lead to arbitrary code execution. Recommendation Update to version 3.1.1 or later. References GitHub Advisory...

7.4AI score
Exploits0Affected Software1
seebug.org
seebug.org
added 2018/01/10 12:0 a.m.61 views

CPP-Ethereum libevm create2 Information Leak Vulnerability(CVE-2017-14457)

Summary An exploitable information leak / denial of service vulnerability exists in the libevm Ethereum Virtual Machine create2 opcode handler of CPP-Ethereum. A specially crafted smart contract code can cause an out-of-bounds read leading to memory disclosure or denial of service. An attacker ca...

8.1AI score0.01742EPSS
Exploits1
Rows per page
Query Builder