353 matches found
MINI-95XR-95PC-H7WJ
Bulletin has no description...
CVE-2026-46681 @nevware21/ts-utils: Prototype Pollution in objDeepCopy/objCopyProps via for...in without hasOwnProperty
@nevware21/ts-utils is a comprehensive TypeScript/JavaScript utility library. Prior to version 0.14.0, the copyProps function in lib/src/object/copy.ts uses for...in to iterate over source object properties without an Object.hasOwnProperty check, and does not filter dangerous keys proto,...
CVE-2026-46681 @nevware21/ts-utils: Prototype Pollution in objDeepCopy/objCopyProps via for...in without hasOwnProperty
@nevware21/ts-utils is a comprehensive TypeScript/JavaScript utility library. Prior to version 0.14.0, the copyProps function in lib/src/object/copy.ts uses for...in to iterate over source object properties without an Object.hasOwnProperty check, and does not filter dangerous keys proto,...
CVE-2026-46681
CVE-2026-46681 affects the npm package @nevware21/ts-utils. Prior to version 0.14.0, the internal _copyProps function in lib/src/object/copy.ts iterates over source properties with for...in without an Object.hasOwnProperty check and does not filter dangerous keys (proto , constructor, prototype)....
DEBIAN-CVE-2026-64120
In the Linux kernel, the following vulnerability has been resolved: net: ethtool: fix NULL pointer dereference in phyreplysize In phypreparedata, several strings such as 'name', 'drvname', 'upstreamsfpname', and 'downstreamsfpname' are allocated using kstrdup. However, these allocations were not...
MINI-WR45-VX42-7WFJ
Bulletin has no description...
MINI-H7MV-QF4F-7VHM
Bulletin has no description...
MINI-GPQ6-9624-9FMR
Bulletin has no description...
CGA-C787-MXQ5-XHGV
Bulletin has no description...
MINI-GXJ7-9X6X-GC9V
Bulletin has no description...
RHSA-2026:39879 Red Hat Security Advisory: rhc security update
Bulletin has no description...
MINI-8P55-2CW6-Q7C6
Bulletin has no description...
CVE-2025-56364
A use of uninitialized value vulnerability exists in the Matter SDK connectedhomeip before 1.4.0, where the GetDestinationGroupId.Value method is called without first checking whether a value exists. This leads to a crash when an InvokeCommand is sent without initializing the destination group ID...
CVE-2025-56364
A use of uninitialized value vulnerability exists in the Matter SDK connectedhomeip before 1.4.0, where the GetDestinationGroupId.Value method is called without first checking whether a value exists. This leads to a crash when an InvokeCommand is sent without initializing the destination group ID...
CVE-2025-56364
The Matter SDK (connectedhomeip) versions prior to 1.4.0 (specifically before commit 0360cc3 ) are vulnerable to a use of uninitialized value. The flaw occurs because the GetDestinationGroupId().Value() method is invoked without verifying if a value exists. If an InvokeCommand is sent without an ...
MINI-MFM3-VX6X-FRFJ
Bulletin has no description...
ECHO-60CB-CA68-EA06
Bulletin has no description...
MINI-RQCM-M8PH-3MRW
Bulletin has no description...