PT-2022-32853

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.130 Description The issue is related to the netfilter component, specifically the nft set pipapo. It involves the release of elements in a clone from an abort path. The actual impact and attack plausibility...

PT-2022-32624

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v3.10 through v5.15.57 Description The issue is related to a data race between perf event set output and perf mmap close. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...

PT-2022-32402

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v3.10 through v5.18.14 Description A data race issue exists between perf event set output and perf mmap close. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-32643

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.56 Description The issue is related to a potential NULL dereference in the aspeed pinmux set mux function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...

[SECURITY] Fedora 36 Update: golang-github-ledisdb-0.6-6.20210112gitd35789e.fc36

Ledisdb is a high-performance NoSQL database library and server written in Go. It's similar to Redis but store data in disk. It supports many data structures including kv, list, hash, zset, set. LedisDB now supports multiple different databases as backends...

[SECURITY] Fedora 36 Update: golang-github-axgle-mahonia-0-0.14.20181112git3358181.fc36

Mahonia is a character-set conversion library implemented in Go. All data is compiled into the executable; it doesn't need any external data files...

GHSA-V42Q-78W8-8FCC set-deep-prop Prototype Pollution

All versions of package set-deep-prop are vulnerable to Prototype Pollution via the main functionality...

set-deep-prop Prototype Pollution

All versions of package set-deep-prop are vulnerable to Prototype Pollution via the main functionality...

CVE-2021-23373

All versions of package set-deep-prop are vulnerable to Prototype Pollution via the main functionality...

Design/Logic Flaw

All versions of package set-deep-prop are vulnerable to Prototype Pollution via the main functionality...

CVE-2021-23373

All versions of package set-deep-prop are vulnerable to Prototype Pollution via the main functionality...

CVE-2021-23373 Prototype Pollution

All versions of package set-deep-prop are vulnerable to Prototype Pollution via the main functionality...

CVE-2021-23373

The CVE-2021-23373 entry concerns set-deep-prop, where the main functionality is vulnerable to Prototype Pollution. Multiple connected sources confirm the vulnerability in set-deep-prop (e.g., GHSA, Veracode, Snyk) and describe how an attacker can pollute Object.prototype via the library’s setDee...

CVE-2021-23373

All versions of package set-deep-prop are vulnerable to Prototype Pollution via the main functionality...

set-deep-prop security vulnerability

set-deep-prop is a tool for setting the values of deeply nested objects and arrays. A security vulnerability exists in set-deep-prop, which stems from the vulnerability of this package to prototype contamination...

PT-2022-9395 · Unknown · Set-Deep-Prop

Name of the Vulnerable Software and Affected Versions: set-deep-prop affected versions not specified Description: The issue affects the main functionality of the package, allowing for Prototype Pollution. Recommendations: At the moment, there is no information about a newer version that contains ...

CVE-2021-23373: Improperly Controlled Modification of Object Prototype Attributes

All versions of package set-deep-prop are vulnerable to Prototype Pollution via the main functionality...

PT-2022-5530 · D Link · D-Link Dir-1935

Name of the Vulnerable Software and Affected Versions: D-Link DIR-1935 version 1.03 Description: The issue is related to the SetQoSSettings function in the web management interface of D-Link DIR-1935 routers, which fails to properly clean input data in the user-supplied string when processing the...

PT-2022-21984 · Wavlink · Wavlink Wn530H4

Name of the Vulnerable Software and Affected Versions: Wavlink WN530HG4 version M30HG4.V5030.191116 Description: An access control issue allows attackers to obtain usernames and passwords via the API endpoint "http://IP ADDRESS/set safety.shtml?r=52300" by searching for the variable syspasswd...

ALPINE-CVE-2022-34266

The libtiff-4.0.3-35.amzn2.0.1 package for LibTIFF on Amazon Linux 2 allows attackers to cause a denial of service application crash, a different vulnerability than CVE-2022-0562. When processing a malicious TIFF file, an invalid range may be passed as an argument to the memset function within...