WordPress Plugin Winters Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting vulnerabilit...

synchrony security vulnerability

synchrony is a javascript-obfuscator cleaner and anti-obfuscator by the relative personal developer. A security vulnerability exists in synchrony versions prior to v2.4.4, which stems from the presence of a prototype contamination vulnerability. The vulnerability can be exploited to execute...

NASA Open MCT Security Vulnerability

NASA Open MCT is an open source open mission control technology from NASA, Inc. for visualizing data on desktop and mobile devices. A security vulnerability exists in versions prior to NASA Open MCT 2.2.5 545a177, which stems from the presence of a prototype contamination vulnerability...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from incorrect validator pruning due to missing register precision contamination...

Tree Kit 安全漏洞

Tree Kit is a toolkit for Cedric Ronvel's personal developers that provides functions that operate with nested object structures. A security vulnerability exists in Cronvel Tree Kit version v.0.7.4 and earlier versions that stems from prototype contamination. An attacker could exploit the...

hellojs security vulnerability

hellojs is a JavaScript-written client-side software development kit for user Oauth authentication for individual developers. A security vulnerability exists in MrSwitch hello.js version 1.18.6, which stems from the presence of a prototype contamination vulnerability. An attacker can exploit the...

underscore-keypath Security Vulnerabilities

underscore-keypath is a JavaScript library for handling keypath operations on objects. A keypath operation is the reading, setting, and manipulation of nested properties or property paths on an object specified by a string. underscore-keypath library provides a set of simple and flexible methods...

WordPress plugin Supsystic Popup 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

Automattic Mongoose 安全漏洞

Automattic Mongoose is a MongoDB object modeling tool for asynchronous environments. A security vulnerability exists in Automattic Mongoose versions prior to 7.3.4 that stems from the presence of a prototype contamination vulnerability...

protobuf.js 安全漏洞

protobuf.js is a pure JavaScript implementation of protobufjs with a protocol buffer implementation for node.js and browser TypeScript support. It is easy to use, extremely fast, and works out-of-the-box with .proto files! A security vulnerability exists in protobuf.js versions 6.10.0 through pri...

tough-cookie 安全漏洞

tough-cookie is an open source library from Salesforce. A security vulnerability exists in tough-cookie versions prior to 4.1.3 that stems from improper handling of cookies when using CookieJar in rejectPublicSuffixes=false mode, which could lead to a prototype contamination vulnerability...

flatnest 安全漏洞

flatnest is a library from the personal developer Bryce Baril. A security vulnerability exists in flatnest that stems from easy prototype contamination via the Nest function in the flatnest/nest.js file...

Parse Server 安全漏洞

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. A security vulnerability exists in Parse Server versions prior to 5.5.2 and prior to 6.2.1, which stems from a vulnerability that allows an attacker to trigger remote code execution using a...

dottie 安全漏洞

dottie is an application from Mick Hansen's personal developer that makes it easy to find nested keys. A security vulnerability exists in versions prior to dottie 2.0.4, which stems from inadequate checking and vulnerability to prototype contamination...

utils 安全漏洞

utils is a utility program by Fred Smith Personal Developer. A security vulnerability exists in versions of utils prior to 0.7.3 that stems from the presence of prototype contamination...

aedart ion 安全漏洞

aedart ion is a product from the Danish individual developer Alin Eugen Deac that provides versatile packages. A security vulnerability exists in aedart ion versions prior to 0.6.1, which stems from a possible prototype contamination issue...

Tencent vConsole 安全漏洞

Tencent vConsole is a lightweight, extensible front-end development tool for mobile web from Tencent, China. A security vulnerability exists in Tencent vConsole version 3.15.0, which stems from a prototype contamination issue due to incorrect key and value parsing in setOptions...

SheetJS 安全漏洞

SheetJS is a software application. A parser and writer for various spreadsheet formats. A security vulnerability exists in SheetJS Community Edition prior to version 0.19.3, which stems from a vulnerability that allows an attacker to prototype contamination by crafting files...

safe-eval 安全漏洞

safe-eval is a safer version of the eval function from the Hage Yaapa Personal Developer. safe-eval suffers from a security vulnerability that stems from incorrect parameter cleanup of the safeEval function, leading to prototype contamination...

Collection 安全漏洞

Collection is a minimalist JavaScript library for working with collections of data by the individual developer kobezzza. A security vulnerability exists in Collection versions prior to 6.8.1, which stems from prototype contamination via extension functions in...