Lucene search
+L

116 matches found

NVD
NVD
•added 2021/07/21 6:15 p.m.•47 views

CVE-2020-19465

An issue has been found in function ObjectStream::getObject in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid read of size 4...

5.5CVSS0.00627EPSS
SaveExploits1References1
Prion
Prion
•added 2021/07/21 6:15 p.m.•38 views

Design/Logic Flaw

An issue has been found in function ObjectStream::getObject in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid read of size 4...

4.3CVSS5.4AI score0.00627EPSS
SaveExploits1References1Affected Software1
Mend
Mend
•added 2021/07/21 5:09 p.m.•7 views

CVE-2020-19465

An issue has been found in function ObjectStream::getObject in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid read of size 4...

6.8CVSS0.00627EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/07/21 12:00 a.m.•10 views

CVE-2020-19465: Out-of-bounds Read

An issue has been found in function ObjectStream::getObject in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid read of size 4...

5.5CVSS5.7AI score0.00627EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/07/21 12:00 a.m.•12 views

PT-2021-10350

Name of the Vulnerable Software and Affected Versions: PDF2JSON version 0.70 Description: An issue in the ObjectStream::getObject function allows attackers to cause a Denial of Service due to an invalid read of size 4. Recommendations: For PDF2JSON version 0.70, consider disabling the...

5.5CVSS0.00627EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
•added 2021/01/04 3:00 p.m.•25 views

CVE-2020-28282

A flaw was found in nodejs-getobject. The set function does not check for the type of object before assigning value to the property allowing an attacker to create a non-existent property or allow the manipulation of the property which could lead to a denial of service or a remote code execution...

9.8CVSS3.7AI score0.0424EPSS
SaveExploits1References5
Veracode
Veracode
•added 2020/12/30 1:24 a.m.•28 views

Prototype Pollution

getobject is vulnerable to prototype pollution. The vulnerability exists through the lack of sanitization of proto header values...

9.8CVSS1.9AI score0.0424EPSS
SaveExploits1References2Affected Software2
osv_azl
osv_azl
•added 2020/12/29 6:15 p.m.•20 views

AZL-44940 CVE-2020-28282 affecting package js-jquery 3.5.0-4

Prototype pollution vulnerability in 'getobject' version 0.1.0 allows an attacker to cause a denial of service and may lead to remote code execution...

9.8CVSS8.2AI score0.0424EPSS
SaveExploits1References1
osv_debian
osv_debian
•added 2020/12/29 6:15 p.m.•8 views

DEBIAN-CVE-2020-28282

Prototype pollution vulnerability in 'getobject' version 0.1.0 allows an attacker to cause a denial of service and may lead to remote code execution...

9.8CVSS8.6AI score0.0424EPSS
SaveExploits1References1
NVD
NVD
•added 2020/12/29 6:15 p.m.•36 views

CVE-2020-28282

Prototype pollution vulnerability in 'getobject' version 0.1.0 allows an attacker to cause a denial of service and may lead to remote code execution...

9.8CVSS9.6AI score0.0424EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
•added 2020/12/29 6:15 p.m.•20 views

CVE-2020-28282

Prototype pollution vulnerability in 'getobject' version 0.1.0 allows an attacker to cause a denial of service and may lead to remote code execution...

9.8CVSS7.2AI score0.0424EPSS
SaveExploits1References4
osv_ubuntu
osv_ubuntu
•added 2020/12/29 6:15 p.m.•13 views

UBUNTU-CVE-2020-28282

Prototype pollution vulnerability in 'getobject' version 0.1.0 allows an attacker to cause a denial of service and may lead to remote code execution...

9.8CVSS7.4AI score0.0424EPSS
SaveExploits1References5
Cvelist
Cvelist
•added 2020/12/29 5:05 p.m.•53 views

CVE-2020-28282

Prototype pollution vulnerability in 'getobject' version 0.1.0 allows an attacker to cause a denial of service and may lead to remote code execution...

9.6AI score0.0424EPSS
SaveExploits1References2
CVE
CVE
•added 2020/12/29 5:05 p.m.•132 views

CVE-2020-28282

CVE-2020-28282 affects the nodejs-getobject package (version 0.1.0) via a prototype pollution flaw that can cause a denial of service and may lead to remote code execution. Public mentions across OSV/NVD/Nessus IBM entries confirm the vulnerability and describe a security update approach rather t...

9.8CVSS9.4AI score0.0424EPSS
SaveExploits1References2Affected Software1
Debian CVE
Debian CVE
•added 2020/12/29 5:05 p.m.•81 views

CVE-2020-28282

Prototype pollution vulnerability in 'getobject' version 0.1.0 allows an attacker to cause a denial of service and may lead to remote code execution...

9.8CVSS8.8AI score0.0424EPSS
SaveExploits1
Mend
Mend
•added 2020/12/29 5:05 p.m.•5 views

CVE-2020-28282

Prototype pollution vulnerability in 'getobject' version 0.1.0 allows an attacker to cause a denial of service and may lead to remote code execution...

9.8CVSS0.0424EPSS
SaveExploits1References4
vulnersOsv
vulnersOsv
•added 2020/12/29 5:05 p.m.•5 views

3d-preview (>=1.0.0, <=1.0.1), 3dviewercomponent (1.0.0) +2560 more potentially affected by CVE-2020-28282 via getobject (0.1.0)

getobject NPM version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on getobject and may be impacted: - 3d-preview =1.0.0, =0.0.2, =1.0.1, =1.0.0-beta, =0.0.1, =1.0.0-alpha1, =0.1.0, =0.4.0, =0.0.9, =0.0.6, =0.12.0-edge9, =0.0.5, =0.0.2, =1.0.1 an...

9.8CVSS0.0424EPSS
SaveExploits1
CNNVD
CNNVD
•added 2020/12/29 12:00 a.m.•23 views

Cowboy Getobject Security Vulnerability

Cowboy Getobject is a codebase based on the Javascript language for working with objects and performing set and get operations by the Cowboy individual developers. A security vulnerability exists in getobject version 0.1.0, which can be exploited by an attacker to cause a denial of service and...

9.8CVSS6.2AI score0.0424EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/29 12:00 a.m.•5 views

CVE-2020-28282: Undefined Security Weakness

Prototype pollution vulnerability in 'getobject' version 0.1.0 allows an attacker to cause a denial of service and may lead to remote code execution...

9.8CVSS6.2AI score0.0424EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2020/12/29 12:00 a.m.•3 views

PT-2020-16972

Name of the Vulnerable Software and Affected Versions getobject version 0.1.0 Description The issue allows an attacker to cause a denial of service and may lead to remote code execution due to a prototype pollution vulnerability. Recommendations For version 0.1.0, at the moment, there is no...

9.8CVSS0.0424EPSS
SaveExploits1References19
Rows per page
Query Builder