PT-2021-28000

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read crash. Technical details about the crash include the functions read xref, pdfi read xref, and pdfi set...

PT-2021-6934

Name of the Vulnerable Software and Affected Versions Hotdog versions prior to 1.0.2 Description The issue is related to incomplete fix and access control errors in the OCI Open Container Initiative function set. This could allow an attacker to elevate their privileges, exhaust the resources of t...

Prototype Pollution

js-data is vulnerable to pollution prototype. The vulnerability exists due to an incomplete fix of CVE-2020-28442. A remote attacker is able to inject arbitrary properties into existing construct prototypes and modify attributes via the deepFillIn and the set functions resulting in prototype...

PT-2021-27985

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow read crash has been reported. The crash involves the functions seturl, parseurl, and curl url set. Recommendations At the moment,...

CVE-2021-23574

All versions of package js-data are vulnerable to Prototype Pollution via the deepFillIn and the set functions. This is an incomplete fix of CVE-2020-28442...

CVE-2021-23574

All versions of package js-data are vulnerable to Prototype Pollution via the deepFillIn and the set functions. This is an incomplete fix of CVE-2020-28442...

Design/Logic Flaw

All versions of package js-data are vulnerable to Prototype Pollution via the deepFillIn and the set functions. This is an incomplete fix of CVE-2020-28442...

CVE-2021-23574

The CVE-2021-23574 entry covers a Prototype Pollution vulnerability in the js-data package triggered via deepFillIn and set, with root cause in object contamination and an impact profile of high severity. Connected documents corroborate this as a js-data issue and note the pollution affects all v...

CVE-2021-23574

All versions of package js-data are vulnerable to Prototype Pollution via the deepFillIn and the set functions. This is an incomplete fix of "CVE-2020-28442" https://snyk.io/vuln/SNYK-JS-JSDATA-1023655...

CVE-2021-23574

All versions of package js-data are vulnerable to Prototype Pollution via the deepFillIn and the set functions. This is an incomplete fix of CVE-2020-28442...

js-data security vulnerabilities

js-data is a framework-agnostic, datastore-agnostic ORM for Node.js and browsers. A security vulnerability exists in js-data that stems from packages being susceptible to prototype contamination via the deepFillIn and set functions...

CVE-2021-23574: Improperly Controlled Modification of Object Prototype Attributes

All versions of package js-data are vulnerable to Prototype Pollution via the deepFillIn and the set functions. This is an incomplete fix of CVE-2020-28442...

PT-2021-15539

Name of the Vulnerable Software and Affected Versions js-data versions prior to the fixed version Description The issue concerns Prototype Pollution via the deepFillIn and the set functions. This is related to an incomplete fix of a previous issue. Recommendations At the moment, there is no...

PT-2021-27977

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a heap-buffer-overflow read crash. The crash state involves functions such as seturl, parseurl, and curl url set. No information is...

AccountsService modification Ubuntu Privilege Escalation

The vulnerability of the AccountsService modification debian/patches/0010-set-language.patch in the Ubuntu operating system involves the release of previously unallocated memory. Exploiting this vulnerability can allow an attacker to increase their privileges...

PT-2021-27968

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap buffer overflow read issue is reported, with a crash type indicating a heap-buffer-overflow READ. The crash state involves functions such as seturl,...

DEBIAN-CVE-2021-44732

Mbed TLS before 3.0.1 has a double free in certain out-of-memory conditions, as demonstrated by an mbedtlssslsetsession failure...

UBUNTU-CVE-2021-44732

Mbed TLS before 3.0.1 has a double free in certain out-of-memory conditions, as demonstrated by an mbedtlssslsetsession failure...

PT-2021-27011

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.15 through v5.15.5 Description The issue is related to a potential NULL dereference in the ethtool set coalesce function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...

CVE-2021-1010

In getSigningKeySet of PackageManagerService.java, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12Android ID: A-189857801...