3323 matches found
GHSA-4J46-MP85-MV8C Path traversal in rollup-plugin-serve
Path traversal in npm package rollup-plugin-serve before version 1.0.2. There is no path sanitization in readFile operation...
GHSA-CG42-4WRC-GP47 Code Injection in node-extend
node-extend through 0.2.0 is vulnerable to Arbitrary Code Execution. User input provided to the argument A of extend functionA,B,as,isAargs located within lib/extend.js is executed by the eval function, resulting in code execution...
CM Registration Pro < 3.2.1 - PHP Object Injection
The plugin was using an outdated library which was affected by a PHP Object Injection issue. The free version is not affected as it was not using the library even though it was skipped with it...
UBUNTU-CVE-2021-32611
A NULL pointer dereference vulnerability exists in eXcallapi.c in Antisip eXosip2 through 5.2.0 when handling certain 3xx redirect responses...
CVE-2021-31204
.NET and Visual Studio Elevation of Privilege Vulnerability...
CVE-2021-31185
Windows Desktop Bridge Denial of Service Vulnerability...
CVE-2021-31170
Windows Graphics Component Elevation of Privilege Vulnerability...
CVE-2021-31174
Microsoft Excel Information Disclosure Vulnerability...
CVE-2021-31180
Microsoft Office Graphics Remote Code Execution Vulnerability...
CVE-2021-31177
Microsoft Office Remote Code Execution Vulnerability...
CVE-2021-31166
HTTP Protocol Stack Remote Code Execution Vulnerability...
CVE-2021-28479
Windows CSC Service Information Disclosure Vulnerability...
GHSA-CF2X-RQC8-GRFQ Regular expression deinal of service in express-validators
All versions of package express-validators are vulnerable to Regular Expression Denial of Service ReDoS when validating specifically-crafted invalid urls...
GHSA-H68Q-55JF-X68W Prototype pollution in chart.js
This affects the package chart.js before 2.9.4. The options parameter is not properly sanitized when it is processed. When the options are processed, the existing options or the defaults options are deeply merged with provided options. However, during this operation, the keys of the object being...
GHSA-662X-FHQG-9P8V Regular Expression Denial of Service in ua-parser-js
The package ua-parser-js before 0.7.22 are vulnerable to Regular Expression Denial of Service ReDoS via the regex for Redmi Phones and Mi Pad Tablets UA...
GHSA-J4RW-X3VG-C8R7 Prototype Pollution in node-oojs
All versions of package node-oojs up to and including version 1.4.0 are vulnerable to Prototype Pollution via the setPath function...
Google Android 输入验证错误漏洞
Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Alliance OHA. an elevation of privilege vulnerability exists in Google Android sqlite3.c. An attacker could exploit this vulnerability to escalate privileges...
Apple watchOS 竞争条件问题漏洞
Apple watchOS is an operating system for smartwatches from Apple, Inc. A vulnerability exists in watchOS due to a Competitive Condition Issue, which originates from a Competitive Condition in the libxpc library. The following products and versions are affected: watchOS: 7.0 18R382, 7.0.1 18R395,...
Jansson Out-of-Bounds Memory Read Vulnerability
Jansson is a C library for encoding, decoding and manipulating JSON data. An out-of-bounds memory read vulnerability exists in Jansson 2.13.1 and earlier versions. The vulnerability stems from a parsing error in jsonloads. No details of the vulnerability are provided at this time...