Lucene search
K

10 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2022-1280

Malicious code in bioql PyPI...

7.5CVSS7.6AI score0.00334EPSS
Exploits1References4
OSV
OSV
added 2022/03/17 12:0 a.m.0 views

GHSA-32J9-6QQM-MQ9G Unhandled case in node-lmdb

The package node-lmdb before 0.9.7 is vulnerable to Denial of Service DoS when defining a non-invokable ToString value, which will cause a crash during type check...

7.5CVSS5.9AI score0.00334EPSS
Exploits1References4
Github Security Blog
Github Security Blog
added 2022/03/17 12:0 a.m.25 views

Unhandled case in node-lmdb

The package node-lmdb before 0.9.7 is vulnerable to Denial of Service DoS when defining a non-invokable ToString value, which will cause a crash during type check...

7.5CVSS2.2AI score0.00334EPSS
Exploits1References4Affected Software1
NVD
NVD
added 2022/03/16 4:15 p.m.7 views

CVE-2022-21164

The package node-lmdb before 0.9.7 are vulnerable to Denial of Service DoS when defining a non-invokable ToString value, which will cause a crash during type check...

7.5CVSS0.00334EPSS
Exploits1References2
OSV
OSV
added 2022/03/16 4:15 p.m.11 views

CVE-2022-21164

The package node-lmdb before 0.9.7 are vulnerable to Denial of Service DoS when defining a non-invokable ToString value, which will cause a crash during type check...

7.5CVSS7.5AI score
Exploits0References2
CVE
CVE
added 2022/03/16 3:25 p.m.79 views

CVE-2022-21164

CVE-2022-21164 affects node-lmdb before 0.9.7. DoS occurs when defining a non-invokable ToString value, causing a crash during type checking. Root cause: improper handling of ToString in lmdb bindings. Impact: DoS through crash; exploitation details provided in Snyk advisory with PoC. Remediation...

7.5CVSS5.6AI score0.00334EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2022/03/16 3:25 p.m.13 views

CVE-2022-21164 Denial of Service (DoS)

The package node-lmdb before 0.9.7 are vulnerable to Denial of Service DoS when defining a non-invokable ToString value, which will cause a crash during type check...

3.7CVSS7.6AI score0.00334EPSS
Exploits1References2
ATTACKERKB
ATTACKERKB
added 2022/03/16 3:23 p.m.2 views

CVE-2022-21164

The package node-lmdb before 0.9.7 are vulnerable to Denial of Service DoS when defining a non-invokable ToString value, which will cause a crash during type check...

7.5CVSS7.1AI score0.00334EPSS
Exploits1References3
CNNVD
CNNVD
added 2022/03/16 12:0 a.m.2 views

node-lmdb 安全漏洞

node-lmdb is a node.js binding for LMDB by the individual developer Timur Kristof of Hungary. A security vulnerability exists in node-lmdb that stems from node-lmdb's susceptibility to denial-of-service DoS attacks when defining uncallable ToString values. Successful exploitation will result in a...

7.5CVSS7.2AI score0.00334EPSS
Exploits1References3
Snyk
Snyk
added 2022/02/14 1:36 p.m.1 views

Denial of Service (DoS)

Overview Affected versions of this package are vulnerable to Denial of Service DoS when defining a non-invokable ToString value, which will cause a crash during type check. PoC js var lmdb = require"node-lmdb"; var fs = require'fs' var dbname = '/mydata' if !fs.existsSyncdbname fs.mkdirSyncdbname...

7.5CVSS6.9AI score0.00334EPSS
Exploits1References2
Rows per page
Query Builder