9928 matches found
CVE-2020-7679
In all versions of package casperjs, the mergeObjects utility function is susceptible to Prototype Pollution...
Prototype Pollution
Overview casperjs is a navigation scripting & testing utility for PhantomJS and SlimerJS. Affected versions of this package are vulnerable to Prototype Pollution. The mergeObjects utility function is susceptible to Prototype Pollution. PoC by Snyk var payload = JSON.parse'"proto": "a": "pwned"';...
Mozilla: JavaScript Type confusion with NativeTypes
The Mozilla Foundation Security Advisory describes this flaw as: Mozilla developer Iain Ireland discovered a missing type check during unboxed objects removal, resulting in a crash. We presume that with enough effort that it could be exploited to run arbitrary code...
Mozilla: JavaScript Type confusion with NativeTypes
The Mozilla Foundation Security Advisory describes this flaw as: Mozilla developer Iain Ireland discovered a missing type check during unboxed objects removal, resulting in a crash. We presume that with enough effort that it could be exploited to run arbitrary code...
PT-2020-19702 · Casperjs Team · Casperjs
Name of the Vulnerable Software and Affected Versions: casperjs versions affected versions not specified Description: The issue concerns a Prototype Pollution vulnerability via the mergeObjects utility function in casperjs, a navigation scripting and testing utility for PhantomJS and SlimerJS. Th...
SAP Business Objects Business Intelligence Platform Code Execution
The vulnerability of the SAP Business Objects Business Intelligence Platform is related to errors in code generation management. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
CVE-2019-9943
In ome.services.graphs.GraphTraversal.findObjectDetails in Open Microscopy Environment OMERO.server 5.1.0 through 5.6.0, permissions on OMERO model objects may be circumvented during certain operations such as move and delete, because group permissions are mishandled...
GHSA-6HGM-866R-3CJV Insecure Deserialization in Apache Commons Collection
Serialized-object interfaces in Java applications using the Apache Commons Collections ACC library may allow remote attackers to execute arbitrary commands via a crafted serialized Java object...
Insecure Deserialization in Apache Commons Beanutils
In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean...
Solr: Code execution via entity expansion
It was found that Apache Lucene would accept an object from an unauthenticated user that could be manipulated through subsequent post requests. An attacker could use this flaw to assemble an object that could permit execution of arbitrary code if the server enabled Apache Solr's Config API...
IBM WebSphere Application Server 8.5.x < 8.5.5.18 / 9.0.x < 9.0.5.5 RCE (CVE-2020-4450)
The IBM WebSphere Application Server running on the remote host is version 8.5.x prior to 8.5.5.18 or 9.0.x prior to 9.0.5.5. It is, therefore, affected by a remote code execution vulnerability. A remote, unauthenticated attacker can exploit this by sending a specially-crafted sequence of...
SAP Business Objects Business Intelligence Platform Information Disclosure Vulnerability (CNVD-2020-40814)
SAP Business Objects Business Intelligence Platform is a suite of business intelligence software and enterprise performance solutions from SAP, Germany. The product features report generation, analytics, and data visualization. An information disclosure vulnerability exists in SAP Business Object...
rubygem-json: Unsafe object creation vulnerability in JSON
A flaw was found in rubygem-json. While parsing certain JSON documents, the json gem including the one bundled with Ruby can be coerced into creating arbitrary objects in the target system. This is the same issue as CVE-2013-0269...
CVE-2020-6269
Under certain conditions SAP Business Objects Business Intelligence Platform, version 4.2, allows an attacker to access information which would otherwise be restricted, leading to Information Disclosure...
CVE-2020-6269
Under certain conditions SAP Business Objects Business Intelligence Platform, version 4.2, allows an attacker to access information which would otherwise be restricted, leading to Information Disclosure...
Information disclosure
Under certain conditions SAP Business Objects Business Intelligence Platform, version 4.2, allows an attacker to access information which would otherwise be restricted, leading to Information Disclosure...
CVE-2020-6269
Under certain conditions SAP Business Objects Business Intelligence Platform, version 4.2, allows an attacker to access information which would otherwise be restricted, leading to Information Disclosure...
CVE-2020-6269
The CVE-2020-6269 entry concerns SAP Business Objects Business Intelligence Platform 4.2 and an information disclosure vulnerability. The connected documents indicate that under certain conditions, an attacker could access information that should be restricted. Concrete technical details such as ...
PT-2020-19064
Name of the Vulnerable Software and Affected Versions SAP Business Objects Business Intelligence Platform version 4.2 Description The issue allows an attacker to access restricted information under certain conditions, leading to information disclosure. Recommendations For SAP Business Objects...
Microsoft Windows WLAN Service Privilege Elevation Vulnerability
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A privilege extraction vulnerability exists in the way memory objects are handled in...