alba-prop.co.jp Cross Site Scripting vulnerability OBB-3750860

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-5196

Mattermost vulnerability CVE-2023-5196 involves an uncontrolled resource consumption DoS caused by failure to enforce character limits in all notification props. Attackers can send an overly long value for a notification_prop, potentially exhausting server resources and taking services temporaril...

PT-2023-27582 · Red Hat · Red Hat Amq Broker

Name of the Vulnerable Software and Affected Versions: Red Hat AMQ Broker affected versions not specified Description: A flaw was found in Red Hat's AMQ Broker, which stores certain passwords in a secret security-properties-prop-module, defined in ActivemqArtemisSecurity CR. However, these...

Google Android security vulnerabilities

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that originates from improper encryption of the buildPropFile of the filesystem.go component, which can be exploited by an attacker to elevate privileges...

SUSE CVE-2004-1188

The pnmgetchunk function in xine 0.99.2 and earlier, and other packages such as MPlayer that use the same code, does not properly verify that the chunk size is less than the PREAMBLESIZE, which causes a read operation with a negative length that leads to a buffer overflow via 1 RMFTAG, 2 DATATAG,...

RHEL 7 : rh-nodejs12-nodejs (RHSA-2020:5086)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:5086 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The...

PT-2023-34504

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.163 Description The issue concerns null pointer dereferencing in the find dup cset node entry and find dup cset prop functions. This problem was introduced in version v5.0 and is fixed in version v5.10.163...

PT-2023-34197

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.0 through v5.15.85 Description The issue concerns null pointer dereferencing in the find dup cset node entry and find dup cset prop functions. This problem was introduced in version v5.0 and fixed in version v5.15.86...

RHEL 7 : rh-nodejs10-nodejs (RHSA-2021:0521)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:0521 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The...

MAL-2022-1408 Malicious code in babel-plugin-transform3react-remove-prop-t8pes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00b3d70f4d8d97db890539838285400fdd678a273c24916e49a3ec846ae4f7af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in babel-plugin-transform3react-remove-prop-t8pes (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 00b3d70f4d8d97db890539838285400fdd678a273c24916e49a3ec846ae4f7af Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-V42Q-78W8-8FCC set-deep-prop Prototype Pollution

All versions of package set-deep-prop are vulnerable to Prototype Pollution via the main functionality...

set-deep-prop Prototype Pollution

All versions of package set-deep-prop are vulnerable to Prototype Pollution via the main functionality...

CVE-2021-23373

All versions of package set-deep-prop are vulnerable to Prototype Pollution via the main functionality...

Design/Logic Flaw

All versions of package set-deep-prop are vulnerable to Prototype Pollution via the main functionality...

CVE-2021-23373 Prototype Pollution

All versions of package set-deep-prop are vulnerable to Prototype Pollution via the main functionality...

CVE-2021-23373

All versions of package set-deep-prop are vulnerable to Prototype Pollution via the main functionality...

CVE-2021-23373

The CVE-2021-23373 entry concerns set-deep-prop, where the main functionality is vulnerable to Prototype Pollution. Multiple connected sources confirm the vulnerability in set-deep-prop (e.g., GHSA, Veracode, Snyk) and describe how an attacker can pollute Object.prototype via the library’s setDee...

CVE-2021-23373

All versions of package set-deep-prop are vulnerable to Prototype Pollution via the main functionality...

set-deep-prop security vulnerability

set-deep-prop is a tool for setting the values of deeply nested objects and arrays. A security vulnerability exists in set-deep-prop, which stems from the vulnerability of this package to prototype contamination...