816 matches found
Code injection
The package extend2 before 1.0.1 are vulnerable to Prototype Pollution via the extend function due to unsafe recursive merge...
CVE-2021-23568
The package extend2 before 1.0.1 are vulnerable to Prototype Pollution via the extend function due to unsafe recursive merge...
PT-2022-9415
Name of the Vulnerable Software and Affected Versions extend2 versions prior to 1.0.1 Description The issue concerns Prototype Pollution via the extend function due to an unsafe recursive merge. This allows for potential manipulation of the prototype, which can lead to various security issues...
CVE-2021-23568: Improperly Controlled Modification of Object Prototype Attributes
The package extend2 before 1.0.1 are vulnerable to Prototype Pollution via the extend function due to unsafe recursive merge...
SUSE SLES12: libsnmp30 / libsnmp30-32bit / net-snmp / net-snmp-devel / perl-SNMP / etc (SUSE-SU-2022:0030-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:0030-1 advisory. - CVE-2020-15862: Make extended MIB read-only bsc1174961 Tenable has extracted the preceding description block directly from the SUSE securi...
Prototype Pollution
Overview extend2 is a forked from node-extend, the difference is overriding array as primitive when deep clone. Affected versions of this package are vulnerable to Prototype Pollution via the extend function due to unsafe recursive merge. POC: js var e = require "extend2" etrue, ,...
PT-2024-11362
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a page leak in the Linux kernel, specifically in the afs extend writeback function. This function has a loop that adds extra pages to a write to improve efficienc...
Out of bounds write in stackvector
StackVec::extend used the lower and upper bounds from an Iterator's sizehint to determine how many items to push into the stack based vector. If the sizehint implementation returned a lower bound that was larger than the upper bound, StackVec would write out of bounds and overwrite memory on the...
[SECURITY] Fedora 34 Update: prosody-0.11.10-1.fc34
Prosody is a flexible communications server for Jabber/XMPP written in Lua. It aims to be easy to use, and light on resources. For developers it aims to be easy to extend and give a flexible system on which to rapidly develop added functionality, or prototype new protocols...
SNMP – Simply Not My Problem. Or is it?
TL;DR: Use SNMPv3; long gone is default community strings, hello complex passwords! Remove from the internet, if required, implement a VPN solution to restrict access to only authorised parties. SNMP is a protocol used for the remote management of devices on a network. By remote, we mean access...
Unbreakable Enterprise kernel security update
5.4.17-2102.202.5 - sctp: delay autoasconf init until binding the first addr Xin Long Orabug: 32907967 CVE-2021-23133 CVE-2021-23133 - dm ioctl: fix out of bounds array access when no devices Mikulas Patocka Orabug: 32860491 CVE-2021-31916 - uek-rpm: update kABI lists for the new symbols Saeed...
Prototype Pollution
Overview Prototype pollution vulnerability in 'js-extend' versions 0.0.1 through 1.0.1 allows attacker to cause a denial of service and may lead to remote code execution. Recommendation Avoid using js-extend as there is no current safe version of this module References - CVE - GitHub Advisory...
Prototype pollution vulnerability in js-extend
Prototype pollution vulnerability in 'js-extend' versions 0.0.1 through 1.0.1 allows attacker to cause a denial of service and may lead to remote code execution...
@cag-group/google-api-tools (0.3.1), @doodle3d/superlogin (>=0.6.2, <=0.7.0) +182 more potentially affected by CVE-2021-25945 via js-extend (1.0.1)
js-extend NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on js-extend and may be impacted: - @cag-group/google-api-tools 0.3.1 - @doodle3d/superlogin =0.6.2, =2.1.12, =1.0.2, =0.0.0, =0.0.49, =1.0.0, =4.2.0, =0.3.4, =0.1.21, =0.0.1-a,...
GHSA-MH82-55CM-6GFH Prototype pollution vulnerability in js-extend
Prototype pollution vulnerability in 'js-extend' versions 0.0.1 through 1.0.1 allows attacker to cause a denial of service and may lead to remote code execution...
Unspecified vulnerability in js-extend
js-extend is a module for Npm with extension capabilities. A security vulnerability exists in js-extend versions 0.0.1 through 1.0.1, which can be exploited by an attacker to cause a denial of service and possibly remote code execution...
CVE-2021-25945
A flaw has been identified in js-extend. A prototype pollution vulnerability allows attackers to cause a denial of service and may lead to remote code execution. The highest threat from this vulnerability is to system availability...
Prototype Pollution
js-extend is vulnerable to prototype pollution. An attacker is able to inject properties into existing construct prototypes and modify attributes such as proto, constructor and prototype...
