Prototype Pollution in deep-override

Prototype pollution vulnerability in 'deep-override' versions 1.0.0 through 1.0.1 allows an attacker to cause a denial of service and may lead to remote code execution...

GHSA-V659-54CX-G4QR Prototype Pollution in deep-override

Prototype pollution vulnerability in 'deep-override' versions 1.0.0 through 1.0.1 allows an attacker to cause a denial of service and may lead to remote code execution...

Prototype Pollution

deep-override is vulnerable to prototype pollution. An attacker is able to exploit the vulnerability to inject arbitrary properties into existing construct prototypes and modify attributes such as proto, constructor and prototype via the override function...

CVE-2021-25941

Prototype pollution vulnerability in 'deep-override' versions 1.0.0 through 1.0.1 allows an attacker to cause a denial of service and may lead to remote code execution...

CVE-2021-25941

Prototype pollution vulnerability in 'deep-override' versions 1.0.0 through 1.0.1 allows an attacker to cause a denial of service and may lead to remote code execution...

Remote code execution

Prototype pollution vulnerability in 'deep-override' versions 1.0.0 through 1.0.1 allows an attacker to cause a denial of service and may lead to remote code execution...

CVE-2021-25941

The CVE-2021-25941 entry concerns the Node.js package deep-override, with a vulnerability present in versions 1.0.0 through 1.0.1 due to a prototype pollution flaw. The underlying issue enables an attacker to trigger a denial of service and may lead to remote code execution. Connected sources cor...

CVE-2021-25941

Prototype pollution vulnerability in 'deep-override' versions 1.0.0 through 1.0.1 allows an attacker to cause a denial of service and may lead to remote code execution...

CVE-2021-25941

Prototype pollution vulnerability in 'deep-override' versions 1.0.0 through 1.0.1 allows an attacker to cause a denial of service and may lead to remote code execution...

deep-override 安全漏洞

deep-override is a software application. Provides a recursive object extension and override. A security vulnerability exists in deep-override versions 1.0.0 through 1.0.1, which can be exploited by an attacker to cause a denial of service and possibly remote code execution...

PT-2021-16868 · Unknown · Deep-Override

Name of the Vulnerable Software and Affected Versions: deep-override versions 1.0.0 through 1.0.1 Description: The issue allows an attacker to cause a denial of service and may lead to remote code execution due to a prototype pollution vulnerability. Recommendations: For deep-override versions...

The vulnerability of the _zipObjectDeep() method implementation in the Lodash library allows a attacker to cause a service failure or execute arbitrary code.

The vulnerability of the zipObjectDeep method implementation in the Lodash library is related to the allocation of unlimited memory. Exploiting this vulnerability could allow an attacker to cause service failures or execute arbitrary code...

GHSA-H68Q-55JF-X68W Prototype pollution in chart.js

This affects the package chart.js before 2.9.4. The options parameter is not properly sanitized when it is processed. When the options are processed, the existing options or the defaults options are deeply merged with provided options. However, during this operation, the keys of the object being...

Command Execution Vulnerability in MIG 5.3 of Deepcore Technology Co.

DeepSign Technology Corporation is a provider of products, services and solutions focused on enterprise-class security, cloud computing and infrastructure. A command-and-execute vulnerability exists in MIG 5.3 of DeepService Technology Corporation, which can be exploited by an attacker to gain...

Command Execution Vulnerability in the Sangfor-IPSec MIG of Deepcore Technology Co.

Ltd. is a product and service provider focusing on enterprise-level security, cloud computing and infrastructure, with three business brands, namely, DeepsenSecure, Cloud and DeepsenSecure New IT, which are committed to carrying the cornerstone work in the process of digital transformation of use...

Prototype Pollution in deep-get-set

All versions of package deep-get-set prior to version 1.1.1 are vulnerable to Prototype Pollution via the main function...

GHSA-85CP-P426-42F5 Prototype Pollution in deep-get-set

All versions of package deep-get-set prior to version 1.1.1 are vulnerable to Prototype Pollution via the main function...

Unauthorized Access Vulnerability in DeepService Baseline Verification System

DeepSign Technology Co., Ltd. is a product and service provider specializing in enterprise-level security, cloud computing and IT infrastructure. An unauthorized access vulnerability exists in the DeepSign's baseline verification system, which can be exploited by attackers to obtain sensitive...

Logic Flaw Vulnerability in Ampcom Deep Security Gateway

Ltd. is a provider of specialized core system products and security services for visual network security. A logic flaw vulnerability exists in the Amberton Deep Security Gateway, which can be exploited by an attacker to log in to the system and obtain sensitive information...

Trend Micro Inc. Home Network Security tdts.ko TRF file-parsing denial-of-service vulnerability

Talos Vulnerability Report TALOS-2021-1239 Trend Micro Inc. Home Network Security tdts.ko TRF file-parsing denial-of-service vulnerability April 22, 2021 CVE Number CVE-2021-31517 SUMMARY A denial-of-service vulnerability exists in the tdts.ko TRF file-parsing functionality of Trend Micro Inc.’s...