Lucene search
+L

83 matches found

Github Security Blog
Github Security Blog
added 2021/10/12 4:26 p.m.60 views

Prototype pollution in getobject

Prototype pollution vulnerability in 'getobject' version 0.1.0 allows an attacker to cause a denial of service and may lead to remote code execution...

9.8CVSS9.1AI score0.04031EPSS
SaveExploits1References4Affected Software1
OSV
OSV
added 2021/10/12 4:26 p.m.64 views

GHSA-957J-59C2-J692 Prototype pollution in getobject

Prototype pollution vulnerability in 'getobject' version 0.1.0 allows an attacker to cause a denial of service and may lead to remote code execution...

9.8CVSS9.5AI score0.04031EPSS
SaveExploits1References4
OSV
OSV
added 2021/07/21 6:15 p.m.17 views

CVE-2020-19465

An issue has been found in function ObjectStream::getObject in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid read of size 4...

5.5CVSS6.6AI score
SaveExploits0References1
NVD
NVD
added 2021/07/21 6:15 p.m.34 views

CVE-2020-19465

An issue has been found in function ObjectStream::getObject in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid read of size 4...

5.5CVSS0.00627EPSS
SaveExploits1References1
Prion
Prion
added 2021/07/21 6:15 p.m.26 views

Design/Logic Flaw

An issue has been found in function ObjectStream::getObject in PDF2JSON 0.70 that allows attackers to cause a Denial of Service due to an invalid read of size 4...

4.3CVSS5.4AI score0.00627EPSS
SaveExploits1References1Affected Software1
RedhatCVE
RedhatCVE
added 2021/01/04 3:0 p.m.20 views

CVE-2020-28282

A flaw was found in nodejs-getobject. The set function does not check for the type of object before assigning value to the property allowing an attacker to create a non-existent property or allow the manipulation of the property which could lead to a denial of service or a remote code execution...

9.8CVSS3.7AI score0.04031EPSS
SaveExploits1References5
Veracode
Veracode
added 2020/12/30 1:24 a.m.21 views

Prototype Pollution

getobject is vulnerable to prototype pollution. The vulnerability exists through the lack of sanitization of proto header values...

9.8CVSS1.9AI score0.04031EPSS
SaveExploits1References2Affected Software2
OSV
OSV
added 2020/12/29 6:15 p.m.6 views

AZL-44940 CVE-2020-28282 affecting package js-jquery 3.5.0-4

Prototype pollution vulnerability in 'getobject' version 0.1.0 allows an attacker to cause a denial of service and may lead to remote code execution...

9.8CVSS7.5AI score0.04031EPSS
SaveExploits1References1
OSV
OSV
added 2020/12/29 6:15 p.m.1 views

DEBIAN-CVE-2020-28282

Prototype pollution vulnerability in 'getobject' version 0.1.0 allows an attacker to cause a denial of service and may lead to remote code execution...

9.8CVSS8.6AI score0.04031EPSS
SaveExploits1References1
NVD
NVD
added 2020/12/29 6:15 p.m.26 views

CVE-2020-28282

Prototype pollution vulnerability in 'getobject' version 0.1.0 allows an attacker to cause a denial of service and may lead to remote code execution...

9.8CVSS9.6AI score0.04031EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
added 2020/12/29 6:15 p.m.15 views

CVE-2020-28282

Prototype pollution vulnerability in 'getobject' version 0.1.0 allows an attacker to cause a denial of service and may lead to remote code execution...

9.8CVSS7.2AI score0.04031EPSS
SaveExploits1References4
OSV
OSV
added 2020/12/29 6:15 p.m.4 views

UBUNTU-CVE-2020-28282

Prototype pollution vulnerability in 'getobject' version 0.1.0 allows an attacker to cause a denial of service and may lead to remote code execution...

9.8CVSS7.4AI score0.04031EPSS
SaveExploits1References5
CVE
CVE
added 2020/12/29 5:5 p.m.96 views

CVE-2020-28282

CVE-2020-28282 affects the nodejs-getobject package (version 0.1.0) via a prototype pollution flaw that can cause a denial of service and may lead to remote code execution. Public mentions across OSV/NVD/Nessus IBM entries confirm the vulnerability and describe a security update approach rather t...

9.8CVSS9.4AI score0.04031EPSS
SaveExploits1References2Affected Software1
Debian CVE
Debian CVE
added 2020/12/29 5:5 p.m.64 views

CVE-2020-28282

Prototype pollution vulnerability in 'getobject' version 0.1.0 allows an attacker to cause a denial of service and may lead to remote code execution...

9.8CVSS8.8AI score0.04031EPSS
SaveExploits1
Cvelist
Cvelist
added 2020/12/29 5:5 p.m.40 views

CVE-2020-28282

Prototype pollution vulnerability in 'getobject' version 0.1.0 allows an attacker to cause a denial of service and may lead to remote code execution...

9.6AI score0.04031EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2020/12/29 12:0 a.m.8 views

Cowboy Getobject Security Vulnerability

Cowboy Getobject is a codebase based on the Javascript language for working with objects and performing set and get operations by the Cowboy individual developers. A security vulnerability exists in getobject version 0.1.0, which can be exploited by an attacker to cause a denial of service and...

9.8CVSS6.2AI score0.04031EPSS
SaveExploits1References4
Veracode
Veracode
added 2020/07/21 4:11 a.m.34 views

Cross-Site Scripting (XSS)

ceph is vulnerable to cross-site scripting XSS. Header-splitting in RGW GetObject allows an attacker to inject and execute arbitrary Javascript in a user's browser...

6.1CVSS2.9AI score0.01525EPSS
SaveExploits0References10Affected Software7
FreeBSD
FreeBSD
added 2020/04/07 12:0 a.m.32 views

ceph14 -- multiple security issues

RedHat reports: ceph: secure mode of msgr2 breaks both confidentiality and integrity aspects for long-lived sessions. ceph: header-splitting in RGW GetObject has a possible XSS...

6.8CVSS1.7AI score0.01585EPSS
SaveExploits0References2
zdt
zdt
added 2017/06/28 12:0 a.m.70 views

Microsoft Windows - win32k!NtGdiExtGetObjectW Kernel Stack Memory Disclosure Exploit

Exploit for windows platform in category dos / poc / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1178 We have discovered that it is possible to disclose portions of uninitialized kernel stack memory in Windows 7-10 through the win32k!NtGdiExtGetObjectW system call accessible...

1.9CVSS7.6AI score0.03423EPSS
SaveExploits3
exploitpack
exploitpack
added 2017/06/22 12:0 a.m.11 views

Microsoft Windows - win32k!NtGdiExtGetObjectW Kernel Stack Memory Disclosure

Microsoft Windows - win32k!NtGdiExtGetObjectW Kernel Stack Memory Disclosure / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1178 We have discovered that it is possible to disclose portions of uninitialized kernel stack memory in Windows 7-10 through the...

7.4AI score
SaveExploits0
Rows per page
Query Builder