Lucene search
K

8 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.2 views

EUVD-2021-0778

Malware in sbrugna...

9.8CVSS9.3AI score0.02947EPSS
Exploits1References5
Node.js
Node.js
added 2021/04/12 6:41 p.m.56 views

Prototype Pollution

Overview Prototype pollution vulnerability in set-or-get version 1.0.0 through 1.2.10 allows an attacker to cause a denial of service and may lead to remote code execution. Recommendation Upgrade to version 1.2.11 or later References - CVE - WhiteSource Advisory...

7.5CVSS7.2AI score0.02947EPSS
Exploits1Affected Software1
OSV
OSV
added 2021/04/12 5:39 p.m.17 views

GHSA-6RV4-4QV6-88G2 Prototype Pollution in set-or-get

Prototype pollution vulnerability in ‘set-or-get’ version 1.0.0 through 1.2.10 allows an attacker to cause a denial of service and may lead to remote code execution...

9.8CVSS9.6AI score0.02947EPSS
Exploits1References4
NVD
NVD
added 2021/02/08 10:15 p.m.6 views

CVE-2021-25913

Prototype pollution vulnerability in 'set-or-get' version 1.0.0 through 1.2.10 allows an attacker to cause a denial of service and may lead to remote code execution...

9.8CVSS0.02947EPSS
Exploits1References2
CVE
CVE
added 2021/02/08 9:22 p.m.74 views

CVE-2021-25913

The CVE-2021-25913 entry involves a prototype pollution vulnerability in the set-or-get npm package (versions 1.0.0–1.2.10). The underlying flaw allows an attacker to pollute JavaScript object prototypes, potentially causing a denial of service and, in some cases, remote code execution. A fix is ...

9.8CVSS9.5AI score0.02947EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2021/02/08 9:22 p.m.11 views

CVE-2021-25913

Prototype pollution vulnerability in 'set-or-get' version 1.0.0 through 1.2.10 allows an attacker to cause a denial of service and may lead to remote code execution...

9.8AI score0.02947EPSS
Exploits1References2
CNNVD
CNNVD
added 2021/02/08 12:0 a.m.3 views

set-or-get security breach

set-or-get is an open source package. It is used to set or get object field values. A security vulnerability in set-or-get versions 1.0.0 through 1.2.10 allows attackers to trigger a denial of service and potentially lead to remote code execution...

9.8CVSS7.6AI score0.02947EPSS
Exploits1References4
Positive Technologies
Positive Technologies
added 2021/02/08 12:0 a.m.1 views

PT-2021-16843 · Unknown · Set-Or-Get

Name of the Vulnerable Software and Affected Versions: set-or-get versions 1.0.0 through 1.2.10 Description: The issue is a prototype pollution vulnerability that allows an attacker to cause a denial of service and may lead to remote code execution. Recommendations: For versions 1.0.0 through...

9.8CVSS9.6AI score0.02947EPSS
Exploits1References8
Rows per page
Query Builder