Lucene search
K

2433 matches found

vulnersOsv
vulnersOsv
added 2020/09/25 6:28 p.m.2 views

deep-floorplan (=0.0.0) potentially affected by CVE-2020-15199 via tensorflow-gpu (=2.3.0)

tensorflow-gpu PYPI version =2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - deep-floorplan =0.0.0 Source cves: CVE-2020-15199 Source advisory: OSV:GHSA-X5CP-9PCF-PP3H...

5.9CVSS6.2AI score0.00239EPSS
Exploits1
vulnersOsv
vulnersOsv
added 2020/09/25 6:28 p.m.3 views

deep-floorplan (=0.0.0) potentially affected by CVE-2020-15198 via tensorflow-gpu (=2.3.0)

tensorflow-gpu PYPI version =2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - deep-floorplan =0.0.0 Source cves: CVE-2020-15198 Source advisory: OSV:GHSA-JC87-6VPP-7FF3...

5.8CVSS6AI score0.00169EPSS
Exploits1
vulnersOsv
vulnersOsv
added 2020/09/25 6:28 p.m.0 views

deep-floorplan (=0.0.0) potentially affected by CVE-2020-15196 via tensorflow-gpu (=2.3.0)

tensorflow-gpu PYPI version =2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - deep-floorplan =0.0.0 Source cves: CVE-2020-15196 Source advisory: OSV:GHSA-PG59-2F92-5CPH...

9.9CVSS7.2AI score0.00302EPSS
Exploits1
vulnersOsv
vulnersOsv
added 2020/09/25 6:28 p.m.1 views

deep-floorplan (=0.0.0) potentially affected by CVE-2020-15194 via tensorflow-gpu (=2.3.0)

tensorflow-gpu PYPI version =2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - deep-floorplan =0.0.0 Source cves: CVE-2020-15194 Source advisory: OSV:GHSA-9MQP-7V2H-2382...

5.3CVSS6AI score0.0022EPSS
Exploits1
vulnersOsv
vulnersOsv
added 2020/09/25 6:28 p.m.2 views

deep-floorplan (=0.0.0) potentially affected by CVE-2020-15192 via tensorflow-gpu (=2.3.0)

tensorflow-gpu PYPI version =2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - deep-floorplan =0.0.0 Source cves: CVE-2020-15192 Source advisory: OSV:GHSA-8FXW-76PX-3RXV...

4.3CVSS5.8AI score0.00226EPSS
Exploits1
vulnersOsv
vulnersOsv
added 2020/09/25 6:28 p.m.1 views

deep-floorplan (=0.0.0) potentially affected by CVE-2020-15190 via tensorflow-gpu (=2.3.0)

tensorflow-gpu PYPI version =2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - deep-floorplan =0.0.0 Source cves: CVE-2020-15190 Source advisory: OSV:GHSA-4G9F-63RX-5CW4...

5.3CVSS6AI score0.00189EPSS
Exploits1
vulnersOsv
vulnersOsv
added 2020/09/04 3:14 p.m.2 views

arupex (>=0.4.0 <=0.4.4), captain-ahab (=1.0.0) +11 more potentially affected by unknown CVE via deep-setter (=1.0.2)

deep-setter NPM version =1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on deep-setter and may be impacted: - arupex =0.4.0, =2.3.4, =3.0.0, =1.0.0, =1.0.0, =0.0.1, =1.0.0, =1.0.18, =0.0.7, =0.0.1, =0.0.6 Source cves: unknown CVE Source advisory:...

5.8AI score
Exploits0
OSV
OSV
added 2020/09/04 3:14 p.m.11 views

GHSA-9QRG-H9G8-C65Q Prototype Pollution in deep-setter

All versions of deep-setter are vulnerable to prototype pollution. The package does not restrict the modification of an Object's prototype, which may allow an attacker to add or modify an existing property that will exist on all objects. Recommendation No fix is currently available. Consider usin...

7AI score
Exploits0References1
Github Security Blog
Github Security Blog
added 2020/09/04 3:14 p.m.27 views

Prototype Pollution in deep-setter

All versions of deep-setter are vulnerable to prototype pollution. The package does not restrict the modification of an Object's prototype, which may allow an attacker to add or modify an existing property that will exist on all objects. Recommendation No fix is currently available. Consider usin...

5.9AI score
Exploits0References2Affected Software1
OSV
OSV
added 2020/09/03 6:9 p.m.1 views

GHSA-46FH-8FC5-XCWX Prototype Pollution in lodash.defaultsdeep

Versions of lodash.defaultsdeep before 4.6.1 are vulnerable to Prototype Pollution. The function 'defaultsDeep' may allow a malicious user to modify the prototype of Object via proto causing the addition or modification of an existing property that will exist on all objects. Recommendation Update...

5.9AI score
Exploits0References1
Github Security Blog
Github Security Blog
added 2020/09/02 4:2 p.m.33 views

Prototype Pollution in smart-extend

All versions of smart-extend are vulnerable to Prototype Pollution. The deep function allows attackers to modify the prototype of Object causing the addition or modification of an existing property that will exist on all objects. Recommendation No fix is currently available. Consider using an...

5.5AI score
Exploits0References3Affected Software1
OSV
OSV
added 2020/09/02 4:2 p.m.8 views

GHSA-F8H3-RQRM-47V9 Prototype Pollution in smart-extend

All versions of smart-extend are vulnerable to Prototype Pollution. The deep function allows attackers to modify the prototype of Object causing the addition or modification of an existing property that will exist on all objects. Recommendation No fix is currently available. Consider using an...

7AI score
Exploits0References2
Veracode
Veracode
added 2020/09/02 6:22 a.m.19 views

Prototype Pollution

deep-get-set is vulnerable to prototype pollution. The vulnerability exists as the main function does not restrict proto, constructor and prototype headers to be set in objects...

9.8CVSS3AI score0.00795EPSS
Exploits1References1Affected Software1
NVD
NVD
added 2020/09/01 10:15 a.m.11 views

CVE-2020-7715

All versions of package deep-get-set are vulnerable to Prototype Pollution via the main function...

9.8CVSS8.6AI score0.00795EPSS
Exploits1References1
Cvelist
Cvelist
added 2020/09/01 9:20 a.m.14 views

CVE-2020-7715 Prototype Pollution

All versions of package deep-get-set are vulnerable to Prototype Pollution via the main function...

9.8CVSS8.6AI score0.00795EPSS
Exploits1References1
CVE
CVE
added 2020/09/01 9:20 a.m.64 views

CVE-2020-7715

CVE-2020-7715 affects the npm package deep-get-set . The vulnerability is a prototype pollution flaw in the main function, arising from an incomplete fix, allowing an attacker to pollute Object.prototype (e.g., via the key path "proto " or related paths). Affected versions are those before the re...

9.8CVSS8.5AI score0.00795EPSS
Exploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2020/09/01 12:0 a.m.2 views

PT-2020-19737 · Npm · Deep-Get-Set

Name of the Vulnerable Software and Affected Versions: deep-get-set versions prior to 1.1.1 Description: The issue concerns Prototype Pollution via the main function. Recommendations: For versions prior to 1.1.1, update to version 1.1.1 or later to resolve the issue...

9.8CVSS9.3AI score0.00795EPSS
Exploits1References4
OpenVAS
OpenVAS
added 2020/08/30 12:0 a.m.15 views

Debian: Security Advisory (DLA-2354-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS9.4AI score0.01065EPSS
Exploits1References4
CNVD
CNVD
added 2020/08/28 12:0 a.m.1 views

Trend Micro Deep Security Manager LDAP Authentication Bypass Vulnerability

Trend Micro Deep Security provides advanced server security for physical, virtual, and cloud servers.Deep Security Manager is a centralized web management console that allows administrators to configure security policies and deploy protection for implementation components. An LDAP authentication...

8.1CVSS7.1AI score0.03824EPSS
Exploits0References1
CNVD
CNVD
added 2020/08/28 12:0 a.m.2 views

Trend Micro Vulnerability Protection and Deep Security Manager Integrity Validation Bypass Vulnerability

Trend Micro Vulnerability Protection is an endpoint vulnerability protection product that provides one step faster and stronger endpoint protection.Trend Micro Deep Security provides advanced server security for physical, virtual, and cloud servers.Deep Security Manager is a centralized Deep...

7.2CVSS7.2AI score0.01683EPSS
Exploits0References1
Rows per page
Query Builder