Lucene search
+L

2540 matches found

vulnersOsv
vulnersOsv
added 2020/09/25 6:28 p.m.7 views

deep-floorplan (=0.0.0) potentially affected by CVE-2020-15193 via tensorflow-gpu (=2.3.0)

tensorflow-gpu PYPI version =2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - deep-floorplan =0.0.0 Source cves: CVE-2020-15193 Source advisory: OSV:GHSA-RJJG-HGV6-H69V...

7.1CVSS7AI score0.0083EPSS
SaveExploits1
vulnersOsv
vulnersOsv
added 2020/09/25 6:28 p.m.6 views

deep-floorplan (=0.0.0) potentially affected by CVE-2020-15191 via tensorflow-gpu (=2.3.0)

tensorflow-gpu PYPI version =2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - deep-floorplan =0.0.0 Source cves: CVE-2020-15191 Source advisory: OSV:GHSA-Q8QJ-FC9Q-CPHR...

5.3CVSS6AI score0.009EPSS
SaveExploits1
vulnersOsv
vulnersOsv
added 2020/09/25 6:28 p.m.7 views

deep-floorplan (=0.0.0) potentially affected by CVE-2020-15199 via tensorflow-gpu (=2.3.0)

tensorflow-gpu PYPI version =2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - deep-floorplan =0.0.0 Source cves: CVE-2020-15199 Source advisory: OSV:GHSA-X5CP-9PCF-PP3H...

5.9CVSS6.2AI score0.00812EPSS
SaveExploits1
vulnersOsv
vulnersOsv
added 2020/09/25 6:28 p.m.6 views

deep-floorplan (=0.0.0) potentially affected by CVE-2020-15198 via tensorflow-gpu (=2.3.0)

tensorflow-gpu PYPI version =2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - deep-floorplan =0.0.0 Source cves: CVE-2020-15198 Source advisory: OSV:GHSA-JC87-6VPP-7FF3...

5.8CVSS6AI score0.00542EPSS
SaveExploits1
vulnersOsv
vulnersOsv
added 2020/09/25 6:28 p.m.5 views

deep-floorplan (=0.0.0) potentially affected by CVE-2020-15196 via tensorflow-gpu (=2.3.0)

tensorflow-gpu PYPI version =2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - deep-floorplan =0.0.0 Source cves: CVE-2020-15196 Source advisory: OSV:GHSA-PG59-2F92-5CPH...

9.9CVSS7.2AI score0.00914EPSS
SaveExploits1
vulnersOsv
vulnersOsv
added 2020/09/25 6:28 p.m.8 views

deep-floorplan (=0.0.0) potentially affected by CVE-2020-15194 via tensorflow-gpu (=2.3.0)

tensorflow-gpu PYPI version =2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - deep-floorplan =0.0.0 Source cves: CVE-2020-15194 Source advisory: OSV:GHSA-9MQP-7V2H-2382...

5.3CVSS6AI score0.01026EPSS
SaveExploits1
vulnersOsv
vulnersOsv
added 2020/09/25 6:28 p.m.4 views

deep-floorplan (=0.0.0) potentially affected by CVE-2020-15192 via tensorflow-gpu (=2.3.0)

tensorflow-gpu PYPI version =2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - deep-floorplan =0.0.0 Source cves: CVE-2020-15192 Source advisory: OSV:GHSA-8FXW-76PX-3RXV...

4.3CVSS5.8AI score0.00834EPSS
SaveExploits1
vulnersOsv
vulnersOsv
added 2020/09/25 6:28 p.m.9 views

deep-floorplan (=0.0.0) potentially affected by CVE-2020-15190 via tensorflow-gpu (=2.3.0)

tensorflow-gpu PYPI version =2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on tensorflow-gpu and may be impacted: - deep-floorplan =0.0.0 Source cves: CVE-2020-15190 Source advisory: OSV:GHSA-4G9F-63RX-5CW4...

5.3CVSS6AI score0.00943EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
added 2020/09/22 12:0 a.m.6 views

The vulnerabilities of Trend Micro Vulnerability Protection and Trend Micro Deep Security Manager, related to authentication deficiencies, allow attackers to enhance their privileges.

The vulnerabilities of Trend Micro Vulnerability Protection and Trend Micro Deep Security Manager are related to authentication deficiencies. Exploiting these vulnerabilities can allow attackers, operating remotely, to increase their privileges...

8.1CVSS7.5AI score0.02757EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2020/09/22 12:0 a.m.13 views

The vulnerabilities of Trend Micro Vulnerability Protection and Trend Micro Deep Security Manager, related to authentication deficiencies, allow attackers to enhance their privileges.

The vulnerabilities of Trend Micro Vulnerability Protection and Trend Micro Deep Security Manager are related to authentication deficiencies. Exploiting these vulnerabilities can allow attackers, operating remotely, to increase their privileges...

8.1CVSS7.5AI score0.02757EPSS
SaveExploits0References4Affected Software1
vulnersOsv
vulnersOsv
added 2020/09/04 3:14 p.m.6 views

arupex (>=0.4.0 <=0.4.4), captain-ahab (=1.0.0) +11 more potentially affected by unknown CVE via deep-setter (=1.0.2)

deep-setter NPM version =1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on deep-setter and may be impacted: - arupex =0.4.0, =2.3.4, =3.0.0, =1.0.0, =1.0.0, =0.0.1, =1.0.0, =1.0.18, =0.0.7, =0.0.1, =0.0.6 Source cves: unknown CVE Source advisory:...

5.8AI score
SaveExploits0
OSV
OSV
added 2020/09/04 3:14 p.m.13 views

GHSA-9QRG-H9G8-C65Q Prototype Pollution in deep-setter

All versions of deep-setter are vulnerable to prototype pollution. The package does not restrict the modification of an Object's prototype, which may allow an attacker to add or modify an existing property that will exist on all objects. Recommendation No fix is currently available. Consider usin...

7AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2020/09/04 3:14 p.m.31 views

Prototype Pollution in deep-setter

All versions of deep-setter are vulnerable to prototype pollution. The package does not restrict the modification of an Object's prototype, which may allow an attacker to add or modify an existing property that will exist on all objects. Recommendation No fix is currently available. Consider usin...

5.9AI score
SaveExploits0References2Affected Software1
OSV
OSV
added 2020/09/03 6:9 p.m.4 views

GHSA-46FH-8FC5-XCWX Prototype Pollution in lodash.defaultsdeep

Versions of lodash.defaultsdeep before 4.6.1 are vulnerable to Prototype Pollution. The function 'defaultsDeep' may allow a malicious user to modify the prototype of Object via proto causing the addition or modification of an existing property that will exist on all objects. Recommendation Update...

5.9AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
added 2020/09/02 4:2 p.m.37 views

Prototype Pollution in smart-extend

All versions of smart-extend are vulnerable to Prototype Pollution. The deep function allows attackers to modify the prototype of Object causing the addition or modification of an existing property that will exist on all objects. Recommendation No fix is currently available. Consider using an...

5.5AI score
SaveExploits0References3Affected Software1
OSV
OSV
added 2020/09/02 4:2 p.m.13 views

GHSA-F8H3-RQRM-47V9 Prototype Pollution in smart-extend

All versions of smart-extend are vulnerable to Prototype Pollution. The deep function allows attackers to modify the prototype of Object causing the addition or modification of an existing property that will exist on all objects. Recommendation No fix is currently available. Consider using an...

7AI score
SaveExploits0References2
Veracode
Veracode
added 2020/09/02 6:22 a.m.22 views

Prototype Pollution

deep-get-set is vulnerable to prototype pollution. The vulnerability exists as the main function does not restrict proto, constructor and prototype headers to be set in objects...

9.8CVSS3AI score0.01965EPSS
SaveExploits1References1Affected Software1
NVD
NVD
added 2020/09/01 10:15 a.m.31 views

CVE-2020-7715

All versions of package deep-get-set are vulnerable to Prototype Pollution via the main function...

9.8CVSS8.6AI score0.01965EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2020/09/01 9:20 a.m.44 views

CVE-2020-7715 Prototype Pollution

All versions of package deep-get-set are vulnerable to Prototype Pollution via the main function...

9.8CVSS8.6AI score0.01965EPSS
SaveExploits1References1
CVE
CVE
added 2020/09/01 9:20 a.m.76 views

CVE-2020-7715

CVE-2020-7715 affects the npm package deep-get-set . The vulnerability is a prototype pollution flaw in the main function, arising from an incomplete fix, allowing an attacker to pollute Object.prototype (e.g., via the key path "proto " or related paths). Affected versions are those before the re...

9.8CVSS8.5AI score0.01965EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder