1349 matches found
PT-2020-16213
Name of the Vulnerable Software and Affected Versions sized-chunks crate versions through 0.6.2 Description The issue concerns memory safety in the sized-chunks crate for Rust. Specifically, in the Chunk implementation, the array size is not checked when constructed with From, unit, or pair...
Command Injection in marsdb
All versions of marsdb are vulnerable to Command Injection. In the DocumentMatcher class, selectors on $where clauses are passed to a Function constructor unsanitized. This allows attackers to run arbitrary commands in the system when the function is executed. Recommendation No fix is currently...
GHSA-5MRR-RGP6-X4GR Command Injection in marsdb
All versions of marsdb are vulnerable to Command Injection. In the DocumentMatcher class, selectors on $where clauses are passed to a Function constructor unsanitized. This allows attackers to run arbitrary commands in the system when the function is executed. Recommendation No fix is currently...
Sandbox Breakout / Arbitrary Code Execution in notevil
Versions of notevil prior to 1.3.2 are vulnerable to Sandbox Escape leading to Remote Code Execution. The package fails to prevent access to the Function constructor by not checking the return values of function calls. This allows attackers to access the Function prototype's constructor leading t...
GHSA-7R5F-7QR4-PF6Q Sandbox Breakout / Arbitrary Code Execution in notevil
Versions of notevil prior to 1.3.2 are vulnerable to Sandbox Escape leading to Remote Code Execution. The package fails to prevent access to the Function constructor by not checking the return values of function calls. This allows attackers to access the Function prototype's constructor leading t...
PT-2020-21131
Name of the Vulnerable Software and Affected Versions notevil versions prior to 1.3.2 Description The issue allows for Sandbox Escape leading to Remote Code Execution due to the package's failure to prevent access to the Function constructor. This is caused by not checking the return values of...
PT-2020-21586
Name of the Vulnerable Software and Affected Versions static-eval versions prior to 2.0.2 Description The issue allows arbitrary code execution when untrusted user input is parsed via the package, as it passes the input directly to the global function constructor. This can be exploited when user...
DOM-based XSS in gmail-js
Affected versions of gmail-js are vulnerable to cross-site scripting in the tools.parseresponse, helper.get.visibleemailspost, and helper.get.emaildatapost functions, which pass user input directly into the Function constructor. Recommendation Update to version 0.6.5 or later...
GHSA-C7PP-G2V2-2766 DOM-based XSS in gmail-js
Affected versions of gmail-js are vulnerable to cross-site scripting in the tools.parseresponse, helper.get.visibleemailspost, and helper.get.emaildatapost functions, which pass user input directly into the Function constructor. Recommendation Update to version 0.6.5 or later...
CVE-2020-7713
All versions of package arr-flatten-unflatten are vulnerable to Prototype Pollution via the constructor...
CVE-2020-7713 Prototype Pollution
All versions of package arr-flatten-unflatten are vulnerable to Prototype Pollution via the constructor...
CVE-2020-7713
CVE-2020-7713 affects the npm package arr-flatten-unflatten . All versions up to and including 1.1.4 are vulnerable to prototype pollution via the constructor . Public advisories (GHSA, OSV, Snyk, Veracode) confirm the issue and provide a PoC demonstrating pollution of Object.prototype. There is ...
PT-2020-19735 · Npm · Arr-Flatten-Unflatten
Name of the Vulnerable Software and Affected Versions: arr-flatten-unflatten versions up to and including 1.1.4 Description: The issue concerns Prototype Pollution via the constructor. This means that an attacker could potentially manipulate the prototype of an object, leading to unintended...
PT-2020-7936
Name of the Vulnerable Software and Affected Versions: gmail-js versions prior to 0.6.5 Description: The issue concerns cross-site scripting in certain functions, specifically tools.parse response, helper.get.visible emails post, and helper.get.email data post, which directly pass user input into...
PT-2020-21592
Name of the Vulnerable Software and Affected Versions samsung-remote versions prior to 1.3.5 Description The issue allows for command injection and is exploitable when user input is passed into the ip option of the package constructor. Recommendations Update to version 1.3.5 or later...
CVE-2020-7713: Improperly Controlled Modification of Object Prototype Attributes
All versions of package arr-flatten-unflatten are vulnerable to Prototype Pollution via the constructor...
Arbitrary Code Execution
Overview sandbox is a nifty javascript sandbox for node.js. Affected versions of this package are vulnerable to Arbitrary Code Execution through this.constructor.constructor. An attacker can execute arbitrary code in the system by evaluating payloads that have access to the main context, such as...
Huawei EulerOS: Security Advisory for PyYAML (EulerOS-SA-2020-1912)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
