Lucene search
+L

1114 matches found

Tenable Nessus
Tenable Nessus
added 2022/10/27 12:0 a.m.15 views

EulerOS 2.0 SP3 : shim (EulerOS-SA-2022-2635)

According to the versions of the shim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - shim: Buffer overflow when loading crafted EFI images CVE-2022-28737 Note that Tenable Network Security has extracted the preceding description...

7.8CVSS7.1AI score0.00326EPSS
SaveExploits0References2
Veracode
Veracode
added 2022/10/19 2:58 a.m.21 views

Prototype Pollution

browserify-shim is vulnerable to prototype pollution. The vulnerability exists due to the separateExposeGlobals function in resolve-shims.js, which doesn’t restrict proto or constructor keys in the supplied shim which allows an attacker to modify object prototypes...

9.8CVSS8.8AI score0.01186EPSS
SaveExploits1References5Affected Software1
Github Security Blog
Github Security Blog
added 2022/10/12 12:0 p.m.28 views

thlorenz browserify-shim vulnerable to prototype pollution

Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the k variable in resolve-shims.js...

9.8CVSS9.5AI score0.01186EPSS
SaveExploits1References7Affected Software1
OSV
OSV
added 2022/10/12 12:0 p.m.12 views

GHSA-866W-WM4H-95C6 thlorenz browserify-shim vulnerable to prototype pollution

Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the k variable in resolve-shims.js...

9.8CVSS9.4AI score0.01186EPSS
SaveExploits1References7
OpenVAS
OpenVAS
added 2022/10/12 12:0 a.m.11 views

Huawei EulerOS: Security Advisory for shim (EulerOS-SA-2022-2591)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.9AI score0.00326EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/10/11 11:15 p.m.3 views

CVE-2022-37617

Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the k variable in resolve-shims.js...

9.8CVSS7.3AI score0.01186EPSS
SaveExploits1References4
NVD
NVD
added 2022/10/11 11:15 p.m.32 views

CVE-2022-37617

Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the k variable in resolve-shims.js...

9.8CVSS0.01186EPSS
SaveExploits1References3
Prion
Prion
added 2022/10/11 11:15 p.m.11 views

Code injection

Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the k variable in resolve-shims.js...

7.5CVSS9.3AI score0.01186EPSS
SaveExploits1References3Affected Software1
CVE
CVE
added 2022/10/11 12:0 a.m.63 views

CVE-2022-37617

Prototype pollution in thlorenz browserify-shim 3.8.15, due to the k variable handling in resolve-shims.js (resolveShims function). Connected sources list this as a vulnerability in the browserify-shim package, with the issue affecting resolution logic in resolve-shims.js and enabling potential p...

9.8CVSS9.4AI score0.01186EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
added 2022/10/11 12:0 a.m.5 views

browserify-shim 安全漏洞

browserify-shim is used by thlorenz individual developers to make CommonJS incompatible files browsable. A security vulnerability exists in browserify-shim version 3.8.15, which stems from a prototype contamination vulnerability found in the resolveShims function...

9.8CVSS8.2AI score0.01186EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
added 2022/10/11 12:0 a.m.8 views

PT-2022-24029 · Thlorenz · Browserify-Shim

Name of the Vulnerable Software and Affected Versions: thlorenz browserify-shim version 3.8.15 Description: The issue is related to a prototype pollution vulnerability in the resolveShims function within the resolve-shims.js file of thlorenz browserify-shim. This vulnerability is exploited via th...

9.8CVSS9.2AI score0.01186EPSS
SaveExploits1References10
Cvelist
Cvelist
added 2022/10/11 12:0 a.m.43 views

CVE-2022-37617

Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the k variable in resolve-shims.js...

9.7AI score0.01186EPSS
SaveExploits1References3
OSV
OSV
added 2022/10/11 12:0 a.m.14 views

CVE-2022-37617

Prototype pollution vulnerability in function resolveShims in resolve-shims.js in thlorenz browserify-shim 3.8.15 via the k variable in resolve-shims.js...

9.8CVSS6.9AI score0.01186EPSS
SaveExploits1References5
OpenVAS
OpenVAS
added 2022/10/10 12:0 a.m.8 views

Huawei EulerOS: Security Advisory for shim (EulerOS-SA-2022-2538)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.9AI score0.00326EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2022/10/10 12:0 a.m.21 views

EulerOS Virtualization 3.0.6.0 : shim (EulerOS-SA-2022-2591)

According to the versions of the shim package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - shim: Buffer overflow when loading crafted EFI images CVE-2022-28737 Note that Tenable Network Security has extracted the preceding...

7.8CVSS7AI score0.00326EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2022/09/26 12:0 a.m.19 views

Huawei EulerOS: Security Advisory for shim (EulerOS-SA-2022-2403)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.9AI score0.00326EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2022/09/26 12:0 a.m.8 views

Huawei EulerOS: Security Advisory for shim (EulerOS-SA-2022-2367)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.9AI score0.00326EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2022/09/23 12:0 a.m.20 views

EulerOS Virtualization 2.9.1 : shim (EulerOS-SA-2022-2367)

According to the versions of the shim packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - shim: Buffer overflow when loading crafted EFI images CVE-2022-28737 Note that Tenable Network Security has extracted the preceding...

7.8CVSS7AI score0.00326EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2022/09/23 12:0 a.m.11 views

The vulnerability of the implementation of the shim_lock verification mechanism in the Grub2 operating system allows a perpetrator to execute arbitrary code and gain full control over the device.

The vulnerability of the shimlock verification mechanism in the Grub2 operating system’s loader is related to incorrect checking of the cryptographic signature. Exploiting this vulnerability allows an attacker to execute arbitrary code and gain full control over the device...

6.4CVSS7.4AI score0.00466EPSS
SaveExploits0References5Affected Software2
OpenVAS
OpenVAS
added 2022/09/14 12:0 a.m.6 views

Huawei EulerOS: Security Advisory for shim (EulerOS-SA-2022-2304)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.9AI score0.00326EPSS
SaveExploits0References2
Rows per page
Query Builder