Lucene search
K

8 matches found

CVE
CVE
added 2024/10/08 3:21 a.m.53 views

CVE-2024-45277

The SAP HANA Node.js client package versions 2.0.0 through 2.21.30 are affected by a Prototype Pollution vulnerability caused by improper cleanup of user input when using the nestTables feature. This allows an attacker to add arbitrary properties to global object prototypes, with low impact on av...

4.3CVSS4.7AI score0.00322EPSS
Exploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2024/10/07 12:0 a.m.3 views

PT-2024-7176 · Sap · Sap Hana Node.Js Client Package

Name of the Vulnerable Software and Affected Versions: SAP HANA Node.js client package versions 2.0.0 through 2.21.30 Description: The issue is related to a Prototype Pollution vulnerability in the SAP HANA Node.js client package, specifically affecting the nestTables feature. This vulnerability...

5.3CVSS7.2AI score0.00322EPSS
Exploits0References13
Veracode
Veracode
added 2024/05/30 5:39 a.m.15 views

Prototype Pollution

mysql2 is vulnerable to Prototype Pollution. The vulnerability is due to improper user input sanitization when data is passed to fields and tables within a nestTables, which allows an attacker to manipulate the objects prototype...

8.2CVSS7AI score0.68341EPSS
Exploits0References4Affected Software1
RedhatCVE
RedhatCVE
added 2024/05/29 7:12 a.m.27 views

CVE-2024-21512

A flaw was found in MySQL2. This issue is due to prototype pollution caused by improper user input sanitization passed to fields and tables when using nestTables. Mitigation Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Securit...

8.2CVSS7.9AI score0.68341EPSS
Exploits0References7
NVD
NVD
added 2024/05/29 5:16 a.m.7 views

CVE-2024-21512

Versions of the package mysql2 before 3.9.8 are vulnerable to Prototype Pollution due to improper user input sanitization passed to fields and tables when using nestTables...

8.2CVSS8.2AI score0.68341EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2024/05/29 5:0 a.m.11 views

CVE-2024-21512

Versions of the package mysql2 before 3.9.8 are vulnerable to Prototype Pollution due to improper user input sanitization passed to fields and tables when using nestTables...

8.2CVSS6.8AI score0.68341EPSS
Exploits0References5
Cvelist
Cvelist
added 2024/05/29 5:0 a.m.60 views

CVE-2024-21512

Versions of the package mysql2 before 3.9.8 are vulnerable to Prototype Pollution due to improper user input sanitization passed to fields and tables when using nestTables...

8.2CVSS8.2AI score0.68341EPSS
Exploits0References5
CNNVD
CNNVD
added 2024/05/29 12:0 a.m.1 views

MySQL2 安全漏洞

MySQL2 is a MySQL client for Node.js by the individual developer Andrey Sidorov. A security vulnerability exists in MySQL2 versions prior to 3.9.8 that stems from a prototype contamination vulnerability due to improper sanitization of input passed to fields and tables when using nestTables...

8.2CVSS7.9AI score0.68341EPSS
Exploits0References6
Rows per page
Query Builder