Lucene search
+L

4 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/08/26 12:00 a.m.•0 views

CVE-2026-80554: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: s390/vfioccw: Limit the number of channel program segments The processing of channel programs, and the CCWs within them, is done recursively. As such, there is an arbitrary but not architectural limit to the number of CCWs that c...

9.3CVSS6AI score0.00196EPSS
SaveExploits0References1
Veracode
Veracode
•added 2022/11/20 11:38 a.m.•29 views

Prototype Pollution

feathers-sequelize is vulnerable to prototype pollution. The vulnerability exists in the cleanQuery method due to the use of insecure recursive logic to filter unsupported keys from the query object, which allows an attacker to inject malicious properties resulting in prototype pollution...

10CVSS8.8AI score0.01536EPSS
SaveExploits0References6Affected Software1
OSV
OSV
•added 2022/10/26 12:00 p.m.•84 views

GHSA-P5M3-27VH-52J4 Feather-Sequelize cleanQuery method vulnerable to Prototype Pollution

Feather-Sequelize cleanQuery method uses insecure recursive logic to filter unsupported keys from the query object. This results in a Remote Code Execution RCE with privileges of application...

9.8CVSS6AI score0.01536EPSS
SaveExploits0References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/10/25 12:00 a.m.•3 views

CVE-2022-29823: Improperly Controlled Modification of Object Prototype Attributes

Feather-Sequalize cleanQuery method uses insecure recursive logic to filter unsupported keys from the query object. This results in a Remote Code Execution RCE with privileges of application...

10CVSS8.2AI score0.01536EPSS
SaveExploits0References3
Rows per page
Query Builder