2510 matches found
CVE-2021-25941
Prototype pollution vulnerability in 'deep-override' versions 1.0.0 through 1.0.1 allows an attacker to cause a denial of service and may lead to remote code execution...
Remote code execution
Prototype pollution vulnerability in 'deep-override' versions 1.0.0 through 1.0.1 allows an attacker to cause a denial of service and may lead to remote code execution...
CVE-2021-25941
Prototype pollution vulnerability in 'deep-override' versions 1.0.0 through 1.0.1 allows an attacker to cause a denial of service and may lead to remote code execution...
CVE-2021-25941
The CVE-2021-25941 entry concerns the Node.js package deep-override, with a vulnerability present in versions 1.0.0 through 1.0.1 due to a prototype pollution flaw. The underlying issue enables an attacker to trigger a denial of service and may lead to remote code execution. Connected sources cor...
CVE-2021-25941
Prototype pollution vulnerability in 'deep-override' versions 1.0.0 through 1.0.1 allows an attacker to cause a denial of service and may lead to remote code execution...
PT-2021-16868 · Unknown · Deep-Override
Name of the Vulnerable Software and Affected Versions: deep-override versions 1.0.0 through 1.0.1 Description: The issue allows an attacker to cause a denial of service and may lead to remote code execution due to a prototype pollution vulnerability. Recommendations: For deep-override versions...
deep-override 安全漏洞
deep-override is a software application. Provides a recursive object extension and override. A security vulnerability exists in deep-override versions 1.0.0 through 1.0.1, which can be exploited by an attacker to cause a denial of service and possibly remote code execution...
The vulnerability of the _zipObjectDeep() method implementation in the Lodash library allows a attacker to cause a service failure or execute arbitrary code.
The vulnerability of the zipObjectDeep method implementation in the Lodash library is related to the allocation of unlimited memory. Exploiting this vulnerability could allow an attacker to cause service failures or execute arbitrary code...
GHSA-H68Q-55JF-X68W Prototype pollution in chart.js
This affects the package chart.js before 2.9.4. The options parameter is not properly sanitized when it is processed. When the options are processed, the existing options or the defaults options are deeply merged with provided options. However, during this operation, the keys of the object being...
Command Execution Vulnerability in the Sangfor-IPSec MIG of Deepcore Technology Co.
Ltd. is a product and service provider focusing on enterprise-level security, cloud computing and infrastructure, with three business brands, namely, DeepsenSecure, Cloud and DeepsenSecure New IT, which are committed to carrying the cornerstone work in the process of digital transformation of use...
Command Execution Vulnerability in MIG 5.3 of Deepcore Technology Co.
DeepSign Technology Corporation is a provider of products, services and solutions focused on enterprise-class security, cloud computing and infrastructure. A command-and-execute vulnerability exists in MIG 5.3 of DeepService Technology Corporation, which can be exploited by an attacker to gain...
@draadnl/openstad-cms (>=0.12.2 <=0.12.3), @ngodn/apostrophe (>=2.94.2 <=2.94.7) +37 more potentially affected by CVE-2020-7715 via deep-get-set (=0.1.1)
deep-get-set NPM version =0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on deep-get-set and may be impacted: - @draadnl/openstad-cms =0.12.2, =2.94.2, =1.3.0, =0.0.1, =0.5.235, =2.94.1, =0.5.0, =0.5.0, =1.0.0, =0.0.1, =0.0.1, =0.0.1, =2.93.0,...
Prototype Pollution in deep-get-set
All versions of package deep-get-set prior to version 1.1.1 are vulnerable to Prototype Pollution via the main function...
GHSA-85CP-P426-42F5 Prototype Pollution in deep-get-set
All versions of package deep-get-set prior to version 1.1.1 are vulnerable to Prototype Pollution via the main function...
Unauthorized Access Vulnerability in DeepService Baseline Verification System
DeepSign Technology Co., Ltd. is a product and service provider specializing in enterprise-level security, cloud computing and IT infrastructure. An unauthorized access vulnerability exists in the DeepSign's baseline verification system, which can be exploited by attackers to obtain sensitive...
Logic Flaw Vulnerability in Ampcom Deep Security Gateway
Ltd. is a provider of specialized core system products and security services for visual network security. A logic flaw vulnerability exists in the Amberton Deep Security Gateway, which can be exploited by an attacker to log in to the system and obtain sensitive information...
Trend Micro Inc. Home Network Security tdts.ko TRF file-parsing denial-of-service vulnerability
Talos Vulnerability Report TALOS-2021-1240 Trend Micro Inc. Home Network Security tdts.ko TRF file-parsing denial-of-service vulnerability April 22, 2021 CVE Number CVE-2021-31518 SUMMARY A denial-of-service vulnerability exists in the tdts.ko TRF file-parsing function of Trend Micro Inc.’s Home...
Trend Micro Inc. Home Network Security tdts.ko TRF file-parsing denial-of-service vulnerability
Talos Vulnerability Report TALOS-2021-1239 Trend Micro Inc. Home Network Security tdts.ko TRF file-parsing denial-of-service vulnerability April 22, 2021 CVE Number CVE-2021-31517 SUMMARY A denial-of-service vulnerability exists in the tdts.ko TRF file-parsing functionality of Trend Micro Inc.’s...
Vulnerability of the DeepTiledInputFile::initialize() function (src/lib/OpenEXR/ImfDeepTiledInputFile.cpp) in the OpenEXR library, which allows a hacker to cause a service failure or execute arbitrary code.
The vulnerability of the DeepTiledInputFile::initialize function located in src/lib/OpenEXR/ImfDeepTiledInputFile.cpp in the OpenEXR library is related to integer overflow when processing input files. Exploiting this vulnerability can allow an attacker to cause a service failure or execute...
