Lucene search
K

8 matches found

Github Security Blog
Github Security Blog
added 2020/07/31 4:18 p.m.15 views

Sandbox bypass in constantinople

constantinople before 3.1.1 affected by a sandbox bypass...

2.2AI score
Exploits0References4Affected Software1
OSV
OSV
added 2020/07/31 4:18 p.m.3 views

GHSA-HG7C-66FF-9Q8G Sandbox bypass in constantinople

constantinople before 3.1.1 affected by a sandbox bypass...

7.1AI score
Exploits0References4
Veracode
Veracode
added 2019/07/22 2:44 a.m.9 views

Arbitrary Code Execution

constantinople is vulnerable to Arbitrary Code Execution. The library uses Function to evaluate the code expression, allowing an attacker to attempt a sandbox bypass which can lead to arbitrary code execution...

7.3AI score
Exploits0
OSV
OSV
added 2019/06/14 4:15 p.m.29 views

GHSA-4VMM-MHCQ-4X9J Sandbox Bypass Leading to Arbitrary Code Execution in constantinople

Versions of constantinople prior to 3.1.1 are vulnerable to a sandbox bypass which can lead to arbitrary code execution. Recommendation Update to version 3.1.1 or later...

10CVSS7.7AI score
Exploits0References4
vulnersOsv
vulnersOsv
added 2019/06/14 4:15 p.m.1 views

04_nodeblog (=1.0.0), 10tcl (>=0.0.1 <=0.0.10) +3903 more potentially affected by unknown CVE via constantinople (>=1.0.2 <=3.0.2)

constantinople NPM version =1.0.2, =0.0.1, =1.0.1, =0.1.1, =0.0.1, =0.0.7, =1.0.23, =1.0.0, =1.0.0, =1.1.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-4VMM-MHCQ-4X9J...

5.8AI score
Exploits0
Github Security Blog
Github Security Blog
added 2019/06/14 4:15 p.m.42 views

Sandbox Bypass Leading to Arbitrary Code Execution in constantinople

Versions of constantinople prior to 3.1.1 are vulnerable to a sandbox bypass which can lead to arbitrary code execution. Recommendation Update to version 3.1.1 or later...

6AI score
Exploits0References5Affected Software1
Node.js
Node.js
added 2018/04/20 9:33 p.m.2005 views

Sandbox Bypass Leading to Arbitrary Code Execution

Overview Versions of constantinople prior to 3.1.1 are vulnerable to a sandbox bypass which can lead to arbitrary code execution. Recommendation Update to version 3.1.1 or later. References GitHub Advisory...

7.4AI score
Exploits0Affected Software1
seebug.org
seebug.org
added 2018/01/10 12:0 a.m.59 views

CPP-Ethereum libevm create2 Information Leak Vulnerability(CVE-2017-14457)

Summary An exploitable information leak / denial of service vulnerability exists in the libevm Ethereum Virtual Machine create2 opcode handler of CPP-Ethereum. A specially crafted smart contract code can cause an out-of-bounds read leading to memory disclosure or denial of service. An attacker ca...

8.1AI score0.00286EPSS
Exploits1
Rows per page
Query Builder