Lucene search
+L

10 matches found

Tenable Nessus
Tenable Nessus
added 2025/08/18 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2021-3805

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - object-path is vulnerable to Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' CVE-2021-3805 Note that Nessus relies on th...

7.5CVSS7AI score0.02097EPSS
Exploits1References2
OpenVAS
OpenVAS
added 2023/03/23 12:0 a.m.20 views

Ubuntu: Security Advisory (USN-5967-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.7AI score0.02097EPSS
Exploits2References2
Ubuntu
Ubuntu
added 2023/03/22 12:7 a.m.74 views

USN-5967-1: object-path vulnerabilities

It was discovered that the set method in object-path could be corrupted as a result of prototype pollution by sending a message to the parent process. An attacker could use this issue to cause object-path to crash. CVE-2020-15256, CVE-2021-23434, CVE-2021-3805...

9.8CVSS7.4AI score0.02097EPSS
Exploits2
OpenVAS
OpenVAS
added 2023/01/30 12:0 a.m.17 views

Debian: Security Advisory (DLA-3291-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.6CVSS8.7AI score0.02097EPSS
Exploits2References4
Debian
Debian
added 2023/01/29 4:18 p.m.79 views

[SECURITY] [DLA 3291-1] node-object-path security update

Debian LTS Advisory DLA-3291-1 [email protected] https://www.debian.org/lts/security/ Guilhem Moulin January 29, 2023 https://wiki.debian.org/LTS Package : node-object-path Version : 0.11.4-2+deb10u2 CVE ID : CVE-2021-3805 CVE-2021-23434 It was discovered that node-object-path, a Node.j...

9.8CVSS7.1AI score0.02097EPSS
Exploits2
vulnersOsv
vulnersOsv
added 2021/09/20 8:46 p.m.8 views

-tompan-reacttemplate (>=1.0.1 <=1.1.0), 0x0.icu.anima (=0.1.0) +5583 more potentially affected by CVE-2021-3805 via object-path (>=0.0.1 <=0.11.7)

object-path NPM version =0.0.1, =1.0.1, =8.4.2, =0.1.0, =0.1.0, =0.1.0, =0.1.1, =1.0.0, =0.0.1, =0.0.22 - @0soft/zero-material-ui =0.0.23-alpha.3 and more Source cves: CVE-2021-3805 Source advisory: OSV:GHSA-8V63-CQQC-6R2C...

7.5CVSS7.1AI score0.02097EPSS
Exploits1
NVD
NVD
added 2021/09/17 6:15 a.m.26 views

CVE-2021-3805

object-path is vulnerable to Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution'...

7.5CVSS0.02097EPSS
Exploits1References3
Debian CVE
Debian CVE
added 2021/09/17 12:0 a.m.38 views

CVE-2021-3805

object-path is vulnerable to Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution'...

7.5CVSS7.6AI score0.02097EPSS
Exploits1
Cvelist
Cvelist
added 2021/09/17 12:0 a.m.37 views

CVE-2021-3805 Prototype Pollution in mariocasciaro/object-path

object-path is vulnerable to Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution'...

7.5CVSS8.1AI score0.02097EPSS
Exploits1References3
CVE
CVE
added 2021/09/17 12:0 a.m.166 views

CVE-2021-3805

CVE-2021-3805 concerns the Node.js library object-path , vulnerable to a prototype pollution flaw. The Root Cause cited in multiple sources is improper modification of Object.prototype attributes, specifically via the del() function when using inherited props (includeInheritedProps). Several conn...

7.5CVSS7.4AI score0.02097EPSS
Exploits1References3Affected Software1
Rows per page
Query Builder