CVE-2024-47549

Sharp and Toshiba Tec MFPs improperly process query parameters in HTTP requests, which may allow contamination of unintended data to HTTP response headers. Accessing a crafted URL which points to an affected product may cause malicious script executed on the web browser...

Sharp MFP 安全漏洞

Sharp MFP is a series of multifunction printers from Sharp Japan. A security vulnerability exists in Sharp MFP that stems from incorrect handling of query parameters in HTTP requests, which could result in unexpected data contamination of the HTTP response header...

DOMPurify 安全漏洞

DOMPurify is a DOM Document Object Model for HTML, MathML and SVG written in JavaScript by Cure53 Personal Developer. A security vulnerability exists in DOMPurify versions prior to 2.5.4 and prior to 3.1.3, which stems from malicious HTML using a special nesting technique to bypass the depth...

node-gettext 安全漏洞

node-gettext is a JavaScript implementation of gettext, a localization framework open-sourced by Alexander Wallin. A security vulnerability exists in node-gettext, which stems from improper cleaning of user input and may be contaminated by prototypes via the addTranslations function in gettext.js...

Chartist 安全漏洞

Chartist is a Chartist open source library of simple responsive charts built using SVG. A security vulnerability exists in Chartist versions 1.x through 1.3.0 that stems from allowing prototype contamination via extensions...

Bunt 安全漏洞

Bunt is a TypeSafe monolithic application framework written in TypeScript for Node.js by the individual developer Artur Bier. A security vulnerability exists in Bunt version v0.29.19, which stems from the component /esm/qs.js contains prototype contamination that allows an attacker to execute...

snapstate 安全漏洞

snapstate is a library by the individual developer Chase Moskal. A security vulnerability exists in snapstate version v0.0.9, which stems from the discovery of a contained prototype contamination via the attemptNestedProperty function. An attacker could exploit the vulnerability to execute...

patch-into security holes

patch-into is a library by akbr individual developers. A security vulnerability exists in patch-into version v1.0.1, which originates from the inclusion of prototype contamination via the function patchInto, which allows attackers to execute arbitrary code or cause a denial of service DoS by...

hod security breach

hod is an open source library from Cafe Bazaar. A security vulnerability exists in hod version v0.4.14, which originates from the inclusion of prototype contamination via the function request, allowing an attacker to execute arbitrary code or cause a denial of service DoS by injecting arbitrary...

Frappe.js Security Vulnerability

Frappe.js is a metadata-driven framework open-sourced by Frappe. It enables rapid development of Node.js and Electron-based applications. A security vulnerability exists in Frappe.js version v0.0.11, which stems from the inclusion of prototype contamination via the function registerView, allowing...

sp-common Security Vulnerabilities

sp-common is a library by Peter Personal Developer. A security vulnerability exists in sp-common version v0.5.4, which originates from the inclusion of prototype contamination via the function mergeDeep, allowing an attacker to execute arbitrary code or cause a denial of service DoS by injecting...

Swiper Security Vulnerabilities

Swiper is a free mobile touch slider by Vladimir Kharlampidi personal developer. It is intended for use in mobile websites, mobile web applications and mobile native applications. A security vulnerability exists in Swiper version v0.0.2, which stems from the inclusion of prototype contamination v...

Swiper Security Vulnerabilities

Swiper is a free mobile touch slider by Vladimir Kharlampidi personal developer. It is intended for use in mobile websites, mobile web applications and mobile native applications. A security vulnerability exists in Swiper version v0.0.2, which stems from the inclusion of prototype contamination v...

shared Security Vulnerabilities

shared is an open source library from agreejs. A security vulnerability exists in shared version 0.0.1, which stems from the presence of prototype contamination via a function that allows an attacker to execute arbitrary code or cause a denial of service DoS by injecting arbitrary attributes...

AG Grid Security Breach

AG Grid is a full-featured, highly customizable JavaScript data grid from AG Grid Open Source. A security vulnerability exists in AG Grid version v31.3.2, which originates from the inclusion of prototype contamination via the component ModuleSupport.jsonApply, which allows an attacker to execute...

key-serializer security vulnerability

key-serializer is a library by Harvey Woo Personal Developer. It is used to serialize keys and query keys deep within objects. A security vulnerability exists in key-serializer version 0.2.5, which stems from a function containing prototype contamination that allows an attacker to execute arbitra...

amoy common Security Vulnerabilities

amoy common is a library in amoyjs open source. A security vulnerability exists in amoy common v1.0.10, which stems from prototype contamination via the function setValue, allowing an attacker to execute arbitrary code or cause a denial of service DoS by injecting arbitrary properties...

jsonic Security Vulnerabilities

jsonic is a JSON parser for Node.js open-sourced by jsonicjs. A security vulnerability exists in jsonic version v2.12.1, which stems from the inclusion of prototype contamination via the function util.clone, allowing an attacker to execute arbitrary code or cause a denial of service DoS by...

Swiper Security Vulnerabilities

Swiper is a free mobile touch slider by Vladimir Kharlampidi personal developer. It is intended for use in mobile websites, mobile web applications and mobile native applications. A security vulnerability exists in Swiper version 0.0.2, which stems from inclusion of prototype contamination via...

cahil utils security vulnerability

cahil utils is a variety of utilities from the individual developer Cahil Foley that provide assistance when developing JS or TS projects. A security vulnerability exists in cahil utils version v2.3.2, which stems from a prototype contamination via function set inclusion, allowing an attacker to...