Incomplete Filtering of Special Elements

Overview Affected versions of this package are vulnerable to Incomplete Filtering of Special Elements in the config-snippets feature flag. An attacker can access sensitive environment variables, including the Kubernetes service account token secret, by injecting arbitrary HAProxy directives. Note...

PT-2024-28313

Name of the Vulnerable Software and Affected Versions requirejs version 2.3.6 Description The issue allows attackers to execute arbitrary code or cause a Denial of Service DoS via injecting arbitrary properties through a prototype pollution vulnerability in the config function. Recommendations Fo...

PT-2017-3154 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 4.13.6 Description: The issue is caused by an out-of-bounds operation in memory within the Linux kernel, specifically in the drivers/usb/core/config.c file. This can be exploited by an attacker using a specially...