VulnCheck KEV: CVE-2022-43769

Hitachi Vantara Pentaho BA Server contains a special element injection vulnerability that allows an attacker to inject Spring templates into properties files, allowing for arbitrary command execution...

Linux Distros Unpatched Vulnerability : CVE-2010-3860

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - IcedTea 1.7.x before 1.7.6, 1.8.x before 1.8.3, and 1.9.x before 1.9.2, as based on OpenJDK 6, declares multiple sensitive variables as public, which allows...

SUSE CVE-2022-49617

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sofsdw: handle errors on card registration If the card registration fails, typically because of deferred probes, the device properties added for headset codecs are not removed, which leads to kernel oopses in driver...

DEBIAN-CVE-2022-49617

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sofsdw: handle errors on card registration If the card registration fails, typically because of deferred probes, the device properties added for headset codecs are not removed, which leads to kernel oopses in driver...

UBUNTU-CVE-2022-49617

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sofsdw: handle errors on card registration If the card registration fails, typically because of deferred probes, the device properties added for headset codecs are not removed, which leads to kernel oopses in driver...

CVE-2022-49617

The CVE-2022-49617 issue affects the Linux kernel ASoC: Intel sof_sdw driver, where on card-registration failure (often deferred probes) headset codec device properties are not removed, leading to kernel oops in driver bind/unbind tests. Provided connected documents confirm this exact description...

CVE-2022-49617 ASoC: Intel: sof_sdw: handle errors on card registration

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sofsdw: handle errors on card registration If the card registration fails, typically because of deferred probes, the device properties added for headset codecs are not removed, which leads to kernel oopses in driver...

CVE-2022-49617 ASoC: Intel: sof_sdw: handle errors on card registration

In the Linux kernel, the following vulnerability has been resolved: ASoC: Intel: sofsdw: handle errors on card registration If the card registration fails, typically because of deferred probes, the device properties added for headset codecs are not removed, which leads to kernel oopses in driver...

Security Bulletin: IBM JRS (Jazz Reporting Service) uses a web link with untrusted references to an external site.

Summary IBM JRS Jazz Reporting Service uses a web link with untrusted references to an external site. A remote attacker could exploit this vulnerability to expose sensitive information or perform unauthorized actions on the victims' web browser. The web application produces links to untrusted...

PT-2025-6524 · Progress Telerik · Kendoreact

Name of the Vulnerable Software and Affected Versions: Progress® Telerik® KendoReact versions v3.5.0 through v9.4.0 Description: An attacker can introduce or modify properties within the global prototype chain, which can result in denial of service or command injection. Recommendations: For...

Progress Telerik UI 安全漏洞

Progress Telerik UI is a suite of UI user interface controls for application development from Progress, Inc. A security vulnerability exists in Progress Telerik UI that stems from an attacker being able to introduce or modify properties in the global prototype chain, which could result in a denia...

Astra Linux – Vulnerability in Zabbix

The implementation of atob in "Zabbix JS" allows for creating a string with arbitrary content and using it to access internal properties of objects...

Prototype Pollution

@tanstack/form-core is vulnerable to Prototype Pollution. The vulnerability is due to improper handling of object properties in the lib.mutateMergeDeep function, allowing attackers to inject properties into JavaScript prototypes by supplying a crafted payload...

CVE-2024-57084

A prototype pollution in the function lib.parse of dot-properties v1.0.1 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57084

A prototype pollution in the function lib.parse of dot-properties v1.0.1 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

CVE-2024-57084

A prototype pollution in the function lib.parse of dot-properties v1.0.1 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

dot-properties 安全漏洞

dot-properties is a library for parsing and stringifying .properties files in JavaScript by the individual developer Eemeli Aro. A security vulnerability exists in dot-properties version v1.0.1, which stems from the lib.parse function containing a prototype contamination vulnerability...

CVE-2024-57084

A prototype pollution in the function lib.parse of dot-properties v1.0.1 allows attackers to cause a Denial of Service DoS via supplying a crafted payload...

PT-2025-5773 · Unknown · Hot Properties

Name of the Vulnerable Software and Affected Versions: dot-properties version 1.0.1 Description: A prototype pollution in the lib.parse function allows attackers to cause a Denial of Service DoS via supplying a crafted payload. Recommendations: For dot-properties version 1.0.1, consider disabling...

CVE-2024-57084

CVE-2024-57084 affects the JavaScript library dot-properties v1.0.1. A prototype pollution vulnerability exists in the lib.parse function that allows an attacker to cause a Denial of Service (DoS) by sending a crafted payload. Connected sources corroborate the issue across multiple feeds (NVD, Re...