Lucene search
K

98 matches found

OSV
OSV
added 2020/10/19 10:15 p.m.1 views

DEBIAN-CVE-2020-15256

A prototype pollution vulnerability has been found in object-path = 0.11.0 is used, which has to be explicitly enabled by creating a new instance of object-path and setting the option includeInheritedProps: true, or by using the default withInheritedProps instance. The default operating mode is n...

9.8CVSS7.2AI score0.00163EPSS
Exploits0References1
OSV
OSV
added 2020/10/19 10:15 p.m.0 views

UBUNTU-CVE-2020-15256

A prototype pollution vulnerability has been found in object-path = 0.11.0 is used, which has to be explicitly enabled by creating a new instance of object-path and setting the option includeInheritedProps: true, or by using the default withInheritedProps instance. The default operating mode is n...

9.8CVSS6.9AI score0.00163EPSS
Exploits0References5
Prion
Prion
added 2020/10/19 10:15 p.m.27 views

Design/Logic Flaw

A prototype pollution vulnerability has been found in object-path = 0.11.0 is used, which has to be explicitly enabled by creating a new instance of object-path and setting the option includeInheritedProps: true, or by using the default withInheritedProps instance. The default operating mode is n...

6.8CVSS8.6AI score0.00163EPSS
Exploits0References2Affected Software1
UbuntuCve
UbuntuCve
added 2020/10/19 10:15 p.m.23 views

CVE-2020-15256

A prototype pollution vulnerability has been found in object-path = 0.11.0 is used, which has to be explicitly enabled by creating a new instance of object-path and setting the option includeInheritedProps: true, or by using the default withInheritedProps instance. The default operating mode is n...

9.8CVSS6.9AI score0.00163EPSS
Exploits0References4
Debian CVE
Debian CVE
added 2020/10/19 9:25 p.m.28 views

CVE-2020-15256

A prototype pollution vulnerability has been found in object-path = 0.11.0 is used, which has to be explicitly enabled by creating a new instance of object-path and setting the option includeInheritedProps: true, or by using the default withInheritedProps instance. The default operating mode is n...

9.8CVSS7.3AI score0.00163EPSS
Exploits0
CVE
CVE
added 2020/10/19 9:25 p.m.188 views

CVE-2020-15256

The CVE-2020-15256 issue concerns the Node.js object-path library where prototype pollution can occur in set() when includeInheritedProps is enabled or using the withInheritedProps instance. Affected versions are

9.8CVSS6.8AI score0.00163EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2020/10/19 9:25 p.m.21 views

CVE-2020-15256 Prototype pollution in object-path

A prototype pollution vulnerability has been found in object-path = 0.11.0 is used, which has to be explicitly enabled by creating a new instance of object-path and setting the option includeInheritedProps: true, or by using the default withInheritedProps instance. The default operating mode is n...

7.7CVSS6.8AI score0.00163EPSS
Exploits0References2
Node.js
Node.js
added 2020/10/19 9:18 p.m.48 views

Prototype Pollution

Overview A prototype pollution vulnerability has been found in object-path = 0.11.0 is used, which has to be explicitly enabled by creating a new instance of object-path and setting the option includeInheritedProps: true, or by using the default withInheritedProps instance. The default operating...

6.8CVSS2.2AI score0.00163EPSS
Exploits0Affected Software1
Github Security Blog
Github Security Blog
added 2020/10/19 8:55 p.m.50 views

Prototype pollution in object-path

Impact A prototype pollution vulnerability has been found in object-path = 0.11.0 is used, which has to be explicitly enabled by creating a new instance of object-path and setting the option includeInheritedProps: true, or by using the default withInheritedProps instance. The default operating mo...

9.8CVSS3.4AI score0.00163EPSS
Exploits0References4Affected Software1
vulnersOsv
vulnersOsv
added 2020/10/19 8:55 p.m.3 views

-tompan-reacttemplate (>=1.0.1 <=1.1.0), 0x0.icu.anima (=0.1.0) +5307 more potentially affected by CVE-2020-15256 via object-path (>=0.0.1 <=0.11.4)

object-path NPM version =0.0.1, =1.0.1, =8.4.2, =0.1.0, =0.1.0, =0.1.0, =0.1.1, =1.0.0, =0.0.1, =0.0.22 - @0soft/zero-material-ui =0.0.23-alpha.3 and more Source cves: CVE-2020-15256 Source advisory: OSV:GHSA-CWX2-736X-MF6W...

9.8CVSS7.1AI score0.00163EPSS
Exploits0
OSV
OSV
added 2020/10/19 8:55 p.m.2 views

GHSA-CWX2-736X-MF6W Prototype pollution in object-path

Impact A prototype pollution vulnerability has been found in object-path = 0.11.0 is used, which has to be explicitly enabled by creating a new instance of object-path and setting the option includeInheritedProps: true, or by using the default withInheritedProps instance. The default operating mo...

7.7CVSS6.9AI score0.00163EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2020/10/19 12:0 a.m.4 views

PT-2020-6065 · Object Path +2 · Object-Path +2

Name of the Vulnerable Software and Affected Versions: object-path versions = 0.11.0...

9.8CVSS7.1AI score0.0065EPSS
Exploits2References32
Huntr
Huntr
added 2020/09/14 12:0 a.m.53 views

Prototype Pollution in mariocasciaro/object-path

Overview object-path is a tiny JavaScript utility to access deep properties using a path for Node and the Browser Prototype Pollution refers to the ability to inject properties into existing JavaScript language construct prototypes, such as objects. JavaScript allows all Object attributes to be...

6.8CVSS0.8AI score0.00163EPSS
Exploits0
Veracode
Veracode
added 2020/08/21 1:5 a.m.14 views

Prototype Pollution

object-path-set is vulnerable to prototype pollution. The vulnerability exists as it does not prevent the proto header to be set in the object through the constructor...

1.6AI score
Exploits0
Hacker One
Hacker One
added 2020/05/19 7:17 p.m.13 views

Node.js third-party modules: [object-path-set] Prototype pollution

I would like to report a prototype pollution vulnerability in object-path-set module. It allows an attacker to inject properties on Object.prototype. Module module name: object-path-set version: 1.0.0 npm page: https://www.npmjs.com/package/object-path-set Module Description set values in...

1AI score
Exploits0
OSV
OSV
added 2015/10/26 7:59 p.m.1 views

DEBIAN-CVE-2015-3218

The authenticationagentnew function in polkitbackend/polkitbackendinteractiveauthority.c in PolicyKit aka polkit before 0.113 allows local users to cause a denial of service NULL pointer dereference and polkitd daemon crash by calling RegisterAuthenticationAgent with an invalid object path...

2.1CVSS6.4AI score0.00133EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2015/10/26 7:0 p.m.24 views

CVE-2015-3218

The authenticationagentnew function in polkitbackend/polkitbackendinteractiveauthority.c in PolicyKit aka polkit before 0.113 allows local users to cause a denial of service NULL pointer dereference and polkitd daemon crash by calling RegisterAuthenticationAgent with an invalid object path...

2.1CVSS5.4AI score0.00133EPSS
Exploits0
OSV
OSV
added 2015/10/26 12:0 a.m.0 views

UBUNTU-CVE-2015-3218

The authenticationagentnew function in polkitbackend/polkitbackendinteractiveauthority.c in PolicyKit aka polkit before 0.113 allows local users to cause a denial of service NULL pointer dereference and polkitd daemon crash by calling RegisterAuthenticationAgent with an invalid object path...

2.1CVSS6.7AI score0.00133EPSS
Exploits0References4
Rows per page
Query Builder