Lucene search
K

10 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2021-2172

Malware in sbrugna...

9.8CVSS9.4AI score0.0178EPSS
Exploits0References5
OSV
OSV
added 2021/10/12 4:27 p.m.17 views

GHSA-7C7G-72Q7-4XHM Prototype pollution vulnerability in 'deepref'

Prototype pollution vulnerability in 'deepref' versions 1.1.1 through 1.2.1 allows attacker to cause a denial of service and may lead to remote code execution...

9.8CVSS9.6AI score0.0178EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2021/10/12 4:27 p.m.18 views

Prototype pollution vulnerability in 'deepref'

Prototype pollution vulnerability in 'deepref' versions 1.1.1 through 1.2.1 allows attacker to cause a denial of service and may lead to remote code execution...

9.8CVSS9.1AI score0.0178EPSS
Exploits0References3Affected Software1
Veracode
Veracode
added 2020/12/09 6:58 a.m.12 views

Prototype Pollution

deepref is vulnerable to prototype pollution. An attacker is able to inject properties into existing construct prototypes and modify attributes such as proto, constructor and prototype...

9.8CVSS3.4AI score0.0178EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2020/12/08 10:15 p.m.1 views

CVE-2020-28274

Prototype pollution vulnerability in 'deepref' versions 1.1.1 through 1.2.1 allows attacker to cause a denial of service and may lead to remote code execution...

9.8CVSS7.5AI score0.0178EPSS
Exploits0References1
NVD
NVD
added 2020/12/08 10:15 p.m.8 views

CVE-2020-28274

Prototype pollution vulnerability in 'deepref' versions 1.1.1 through 1.2.1 allows attacker to cause a denial of service and may lead to remote code execution...

9.8CVSS9.6AI score0.0178EPSS
Exploits0References1
Prion
Prion
added 2020/12/08 10:15 p.m.9 views

Remote code execution

Prototype pollution vulnerability in 'deepref' versions 1.1.1 through 1.2.1 allows attacker to cause a denial of service and may lead to remote code execution...

7.5CVSS9.5AI score0.0178EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2020/12/08 9:28 p.m.12 views

CVE-2020-28274

Prototype pollution vulnerability in 'deepref' versions 1.1.1 through 1.2.1 allows attacker to cause a denial of service and may lead to remote code execution...

9.6AI score0.0178EPSS
Exploits0References1
CVE
CVE
added 2020/12/08 9:28 p.m.42 views

CVE-2020-28274

CVE-2020-28274 is a prototype pollution vulnerability in the Node.js package deepref , affecting versions 1.1.1 through 1.2.1 . The provided connected documents describe that an attacker can cause a denial of service and may lead to remote code execution . There are no explicit exploit steps or i...

9.8CVSS9.5AI score0.0178EPSS
Exploits0References1Affected Software1
CNNVD
CNNVD
added 2020/12/08 12:0 a.m.1 views

deepref to security vulnerabilities

Isaymatato Deepref is a JS-written codebase for interacting with dictionary-type data by the individual developer Isaymatato. A security vulnerability exists in deepref versions 1.1.1 through 1.2.1, which stems from a prototype contamination vulnerability in allows an attacker to exploit the...

9.8CVSS7.6AI score0.0178EPSS
Exploits0References3
Rows per page
Query Builder