vexhub

VEX Hub es un repositorio centralizado que recopila y gestiona documentos de Vulnerability Exploitability eXchange VEX de diversos proyectos de software de código abierto. Sirve como un recurso integral de información sobre vulnerabilidades, ayudando a los usuarios y a las herramientas de segurid...

threat-finder

OffSeq Threat Finder threat-finder encuentra el software vulnerable realmente en ejecución en un host — no lo que afirma un manifiesto — y te indica qué hallazgos son accesibles desde la red. Resuelve cada servicio en ejecución y, con --scope all, cada paquete del sistema operativo instalado a un...

vexhub-crawler

VEX Hub Crawler vexhub-crawler es un componente del VEX Hub que recupera automáticamente documentos VEX de los repositorios fuente. Descripción general El rastreador identifica los repositorios fuente a partir de PURL URL de paquete registrados y copia los documentos VEX en VEX Hub. Este proceso...

cvelistV5

Nota 2026-2-17 Se agrega un día adicional de procesamiento para la normalización de fechas para abordar posibles inconsistencias Nuevo cronograma de normalización de fechas: 2/16/26 - 2/28/26 Nota 2026-2-10 Cambio en el archivodeltaLog.json de normalización de fechas de registros El archivo...

EUVD-2021-7546

Malicious code in bioql PyPI...

CVE-2021-20089

Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' in purl 2.3.2 allows a malicious user to inject properties into Object.prototype...

CVE-2021-20089

Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' in purl 2.3.2 allows a malicious user to inject properties into Object.prototype...

CVE-2021-20089

Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' in purl 2.3.2 allows a malicious user to inject properties into Object.prototype...

CVE-2021-20089

Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' in purl 2.3.2 allows a malicious user to inject properties into Object.prototype...

Buffer overflow

Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' in purl 2.3.2 allows a malicious user to inject properties into Object.prototype...

CVE-2021-20089

Improperly Controlled Modification of Object Prototype Attributes 'Prototype Pollution' in purl 2.3.2 allows a malicious user to inject properties into Object.prototype...

CVE-2021-20089

CVE-2021-20089 affects purl 2.3.2, where improper modification of Object.prototype attributes enables prototype pollution. Root cause: input handling allows injecting properties into Object.prototype; this can impact confidentiality, integrity, and availability (per CVSS3.1 metrics). The availabl...

purl 安全漏洞

purl is a software application. An AMD-compatible utility that parses URLs and provides easy access to their attributes e.g., protocol, host, port, etc., path segments, query string parameters, fragment parameters, and more. A security vulnerability exists in purl 2.3.2, which arises from an...

PT-2021-13767 · Purl · Purl

Name of the Vulnerable Software and Affected Versions: purl version 2.3.2 Description: The issue is related to Improperly Controlled Modification of Object Prototype Attributes, also known as 'Prototype Pollution'. This allows a malicious user to inject properties into Object.prototype...

Vulnerablecode - A Free And Open Vulnerabilities Database And The Packages They Impact And The Tools To Aggregate And Correlate These Vulnerabilities

VulnerableCode is a free and open database of FOSS software package vulnerabilities and the tools to create and keep the data current. It is made by the FOSS community to improve and secure the open source software ecosystem. Why? The existing solutions are commercial proprietary vulnerability...