Lucene search
+L

10413 matches found

BDU FSTEC
BDU FSTEC
added 2020/10/27 12:00 a.m.17 views

The vulnerability of the set_file_metadata function in the GNU Wget download manager allows a hacker to gain access to protected information.

The vulnerability of the setfilemetadata function in the GNU Wget download manager is related to the lack of protection for metadata. Exploiting this vulnerability could allow an attacker to access protected information...

7.8CVSS6.6AI score0.00659EPSS
SaveExploits1References4Affected Software5
Veracode
Veracode
added 2020/10/20 1:39 a.m.37 views

Prototype Pollution

object-path is vulnerable to prototype pollution. The vulnerability exists as the set method does not restrict the proto header value to be set. The vulnerability is limited to the includeInheritedProps mode, and setting the option includeInheritedProps: true, or by using the default...

9.8CVSS1.6AI score0.01546EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2020/10/19 10:15 p.m.45 views

CVE-2020-15256

A prototype pollution vulnerability has been found in object-path = 0.11.0 is used, which has to be explicitly enabled by creating a new instance of object-path and setting the option includeInheritedProps: true, or by using the default withInheritedProps instance. The default operating mode is n...

9.8CVSS9AI score
SaveExploits0References2
OSV
OSV
added 2020/10/19 10:15 p.m.7 views

DEBIAN-CVE-2020-15256

A prototype pollution vulnerability has been found in object-path = 0.11.0 is used, which has to be explicitly enabled by creating a new instance of object-path and setting the option includeInheritedProps: true, or by using the default withInheritedProps instance. The default operating mode is n...

9.8CVSS7.2AI score0.01546EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2020/10/19 10:15 p.m.33 views

CVE-2020-15256

A prototype pollution vulnerability has been found in object-path = 0.11.0 is used, which has to be explicitly enabled by creating a new instance of object-path and setting the option includeInheritedProps: true, or by using the default withInheritedProps instance. The default operating mode is n...

9.8CVSS6.9AI score0.01546EPSS
SaveExploits0References4
OSV
OSV
added 2020/10/19 10:15 p.m.11 views

UBUNTU-CVE-2020-15256

A prototype pollution vulnerability has been found in object-path = 0.11.0 is used, which has to be explicitly enabled by creating a new instance of object-path and setting the option includeInheritedProps: true, or by using the default withInheritedProps instance. The default operating mode is n...

9.8CVSS6.9AI score0.01546EPSS
SaveExploits0References5
Prion
Prion
added 2020/10/19 10:15 p.m.36 views

Design/Logic Flaw

A prototype pollution vulnerability has been found in object-path = 0.11.0 is used, which has to be explicitly enabled by creating a new instance of object-path and setting the option includeInheritedProps: true, or by using the default withInheritedProps instance. The default operating mode is n...

6.8CVSS8.6AI score0.01546EPSS
SaveExploits0References2Affected Software1
CVE
CVE
added 2020/10/19 9:25 p.m.214 views

CVE-2020-15256

The CVE-2020-15256 issue concerns the Node.js object-path library where prototype pollution can occur in set() when includeInheritedProps is enabled or using the withInheritedProps instance. Affected versions are

9.8CVSS6.8AI score0.01546EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
added 2020/10/19 9:25 p.m.46 views

CVE-2020-15256

A prototype pollution vulnerability has been found in object-path = 0.11.0 is used, which has to be explicitly enabled by creating a new instance of object-path and setting the option includeInheritedProps: true, or by using the default withInheritedProps instance. The default operating mode is n...

9.8CVSS7.3AI score0.01546EPSS
SaveExploits0
Cvelist
Cvelist
added 2020/10/19 9:25 p.m.48 views

CVE-2020-15256 Prototype pollution in object-path

A prototype pollution vulnerability has been found in object-path = 0.11.0 is used, which has to be explicitly enabled by creating a new instance of object-path and setting the option includeInheritedProps: true, or by using the default withInheritedProps instance. The default operating mode is n...

7.7CVSS6.8AI score0.01546EPSS
SaveExploits0References2
nodejs
nodejs
added 2020/10/19 9:18 p.m.62 views

Prototype Pollution

Overview A prototype pollution vulnerability has been found in object-path = 0.11.0 is used, which has to be explicitly enabled by creating a new instance of object-path and setting the option includeInheritedProps: true, or by using the default withInheritedProps instance. The default operating...

6.8CVSS2.2AI score0.01546EPSS
SaveExploits0Affected Software1
Github Security Blog
Github Security Blog
added 2020/10/19 8:55 p.m.65 views

Prototype pollution in object-path

Impact A prototype pollution vulnerability has been found in object-path = 0.11.0 is used, which has to be explicitly enabled by creating a new instance of object-path and setting the option includeInheritedProps: true, or by using the default withInheritedProps instance. The default operating mo...

9.8CVSS3.4AI score0.01546EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2020/10/19 8:55 p.m.16 views

GHSA-CWX2-736X-MF6W Prototype pollution in object-path

Impact A prototype pollution vulnerability has been found in object-path = 0.11.0 is used, which has to be explicitly enabled by creating a new instance of object-path and setting the option includeInheritedProps: true, or by using the default withInheritedProps instance. The default operating mo...

7.7CVSS6.9AI score0.01546EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2020/10/19 2:37 p.m.11 views

nodejs-dot-prop: prototype pollution

A prototype pollution flaw was found in nodejs-dot-prop. The function set could be tricked into adding or modifying properties of Object.prototype using any of the constructor, prototype, or proto paths. The highest threat from this vulnerability is to data confidentiality and integrity as well a...

7.5CVSS7.2AI score0.03079EPSS
SaveExploits1References5
CNVD
CNVD
added 2020/10/19 12:00 a.m.12 views

Dell EMC NetWorker Incorrect Privilege Assignment Vulnerability

Dell EMC NetWorker is a suite of unified backup and recovery software from Dell USA. The software provides backup and recovery, deduplication elimination, backup reporting and other features. A security vulnerability exists in Dell EMC NetWorker versions prior to 19.3.0.2 that stems from a failur...

6.8CVSS6.8AI score0.00717EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2020/10/19 12:00 a.m.14 views

PT-2020-6065 · Object Path +2 · Object-Path +2

Name of the Vulnerable Software and Affected Versions: object-path versions = 0.11.0...

9.8CVSS7.1AI score0.02097EPSS
SaveExploits2References32
Positive Technologies
Positive Technologies
added 2020/10/13 12:00 a.m.12 views

PT-2020-13802 · Apache · Apache Solr

Name of the Vulnerable Software and Affected Versions: Apache Solr versions 6.6.0 through 6.6.6 Apache Solr versions 7.0.0 through 7.7.3 Apache Solr versions 8.0.0 through 8.6.2 Description: The issue prevents some features considered dangerous, which could be used for remote code execution, to b...

9.8CVSS9.5AI score0.79342EPSS
SaveExploits1References53
OSV
OSV
added 2020/10/07 6:15 p.m.4 views

DEBIAN-CVE-2020-26880

Sympa through 6.2.57b.2 allows a local privilege escalation from the sympa user account to full root access by modifying the sympa.conf configuration file which is owned by sympa and parsing it through the setuid sympanewaliases-wrapper executable...

7.8CVSS6.7AI score0.00352EPSS
SaveExploits0References1
NVD
NVD
added 2020/10/02 10:15 a.m.42 views

CVE-2020-7737

All versions of package safetydance are vulnerable to Prototype Pollution via the set function...

9.8CVSS0.01355EPSS
SaveExploits1References1
OSV
OSV
added 2020/10/02 10:15 a.m.17 views

CVE-2020-7736

The package bmoor before 0.8.12 are vulnerable to Prototype Pollution via the set function...

9.8CVSS6.6AI score
SaveExploits0References2
Rows per page
Query Builder