Lucene search
+L

3 matches found

Mend
Mend
•added 2022/02/24 12:00 a.m.•2 views

CVE-2022-21824

Due to the formatting logic of the "console.table" function it was not safe to allow user controlled input to be passed to the "properties" parameter while simultaneously passing a plain object with at least one property as the first parameter, which could be "proto". The prototype pollution has...

8.8CVSS0.21514EPSS
SaveExploits0References16
Tenable Nessus
Tenable Nessus
•added 2015/02/25 12:00 a.m.•71 views

SuSE 11.3 Security Update : php53 (SAT Patch Number 10313)

PHP 5.3 was updated to fix three security issues : - Use-after-free vulnerability allowed remote attackers to execute arbitrary code via a crafted unserialize call that leveraged improper handling of duplicate keys within the serialized properties of an object. bnc910659. CVE-2014-8142 -...

7.5CVSS7.5AI score0.53166EPSS
SaveExploits11References9
Prion
Prion
•added 2015/01/27 8:03 p.m.•41 views

Design/Logic Flaw

Use-after-free vulnerability in the processnesteddata function in ext/standard/varunserializer.re in PHP before 5.4.37, 5.5.x before 5.5.21, and 5.6.x before 5.6.5 allows remote attackers to execute arbitrary code via a crafted unserialize call that leverages improper handling of duplicate...

7.5CVSS7.8AI score0.53166EPSS
SaveExploits10References23Affected Software1
Rows per page
Query Builder