Lucene search
+L

18 matches found

osv_ghsa
osv_ghsa
•added 2022/05/24 5:34 p.m.•40 views

GHSA-WWG2-2CRQ-6GRR Prototype pollution in @strikeentco/set

Prototype pollution vulnerability in '@strikeentco/set' version 1.0.0 allows attacker to cause a denial of service and may lead to remote code execution...

7.5CVSS7.8AI score0.02291EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2022/02/05 12:00 a.m.•36 views

Prototype Pollution in @strikeentco/set

This affects the package @strikeentco/set before 1.0.2. It allows an attacker to cause a denial of service and may lead to remote code execution. Note: This vulnerability derives from an incomplete fix in https://security.snyk.io/vuln/SNYK-JS-STRIKEENTCOSET-1038821...

9.8CVSS4AI score0.03734EPSS
SaveExploits1References6Affected Software1
osv_ghsa
osv_ghsa
•added 2022/02/05 12:00 a.m.•45 views

GHSA-39QV-PRMH-X37F Prototype Pollution in @strikeentco/set

This affects the package @strikeentco/set before 1.0.2. It allows an attacker to cause a denial of service and may lead to remote code execution. Note: This vulnerability derives from an incomplete fix in https://security.snyk.io/vuln/SNYK-JS-STRIKEENTCOSET-1038821...

7.5CVSS9.7AI score0.03734EPSS
SaveExploits1References6
NVD
NVD
•added 2022/02/04 8:15 p.m.•30 views

CVE-2021-23497

This affects the package @strikeentco/set before 1.0.2. It allows an attacker to cause a denial of service and may lead to remote code execution. Note: This vulnerability derives from an incomplete fix in https://security.snyk.io/vuln/SNYK-JS-STRIKEENTCOSET-1038821...

9.8CVSS0.03734EPSS
SaveExploits1References3
Prion
Prion
•added 2022/02/04 8:15 p.m.•25 views

Remote code execution

This affects the package @strikeentco/set before 1.0.2. It allows an attacker to cause a denial of service and may lead to remote code execution. Note: This vulnerability derives from an incomplete fix in https://security.snyk.io/vuln/SNYK-JS-STRIKEENTCOSET-1038821...

7.5CVSS9.6AI score0.03734EPSS
SaveExploits1References3Affected Software1
Mend
Mend
•added 2022/02/04 8:00 p.m.•6 views

CVE-2021-23497

This affects the package @strikeentco/set before 1.0.2. It allows an attacker to cause a denial of service and may lead to remote code execution. Note: This vulnerability derives from an incomplete fix in https://security.snyk.io/vuln/SNYK-JS-STRIKEENTCOSET-1038821...

9.8CVSS0.03734EPSS
SaveExploits1References3
CVE
CVE
•added 2022/02/04 8:00 p.m.•124 views

CVE-2021-23497

The CVE-2021-23497 entry affects the package @strikeentco/set prior to 1.0.2. The vulnerability arises from an incomplete fix and enables Prototype Pollution, leading to a Denial of Service and may enable Remote Code Execution. Affected code paths include unsafe recursive merges and path-based pr...

9.8CVSS8.9AI score0.03734EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
•added 2022/02/04 8:00 p.m.•41 views

CVE-2021-23497 Prototype Pollution

This affects the package @strikeentco/set before 1.0.2. It allows an attacker to cause a denial of service and may lead to remote code execution. Note: This vulnerability derives from an incomplete fix in https://security.snyk.io/vuln/SNYK-JS-STRIKEENTCOSET-1038821...

7.5CVSS9.9AI score0.03734EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2022/02/04 8:00 p.m.•14 views

CVE-2021-23497

This affects the package @strikeentco/set before 1.0.2. It allows an attacker to cause a denial of service and may lead to remote code execution. Note: This vulnerability derives from an incomplete fix in https://security.snyk.io/vuln/SNYK-JS-STRIKEENTCOSET-1038821...

9.8CVSS7.5AI score0.03734EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2022/02/04 12:00 a.m.•5 views

PT-2022-9403

Name of the Vulnerable Software and Affected Versions @strikeentco/set versions prior to 1.0.2 Description This issue allows an attacker to cause a denial of service and may lead to remote code execution. It derives from an incomplete fix. Recommendations For versions prior to 1.0.2, update to...

9.8CVSS0.03734EPSS
SaveExploits1References11
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/04 12:00 a.m.•6 views

CVE-2021-23497: Improperly Controlled Modification of Object Prototype Attributes

This affects the package @strikeentco/set before 1.0.2. It allows an attacker to cause a denial of service and may lead to remote code execution. Note: This vulnerability derives from an incomplete fix in https://security.snyk.io/vuln/SNYK-JS-STRIKEENTCOSET-1038821...

9.8CVSS8.5AI score0.03734EPSS
SaveExploits1References2
Veracode
Veracode
•added 2020/11/11 4:55 a.m.•27 views

Prototype Pollution

@strikeentco/set is vulnerable to prototype pollution. An attacker is able to inject properties into existing construct prototypes and modify attributes such as proto, constructor and prototype...

7.5CVSS3.5AI score0.02291EPSS
SaveExploits0References2Affected Software1
NVD
NVD
•added 2020/11/10 4:15 p.m.•31 views

CVE-2020-28267

Prototype pollution vulnerability in '@strikeentco/set' version 1.0.0 allows attacker to cause a denial of service and may lead to remote code execution...

7.5CVSS7.8AI score0.02291EPSS
SaveExploits0References2
Prion
Prion
•added 2020/11/10 4:15 p.m.•28 views

Remote code execution

Prototype pollution vulnerability in '@strikeentco/set' version 1.0.0 allows attacker to cause a denial of service and may lead to remote code execution...

5CVSS7.8AI score0.02291EPSS
SaveExploits0References2Affected Software1
Mend
Mend
•added 2020/11/10 3:58 p.m.•7 views

CVE-2020-28267

Prototype pollution vulnerability in '@strikeentco/set' version 1.0.0 allows attacker to cause a denial of service and may lead to remote code execution...

8.7CVSS0.02291EPSS
SaveExploits0References4
CVE
CVE
•added 2020/11/10 3:58 p.m.•73 views

CVE-2020-28267

CVE-2020-28267 concerns a prototype pollution vulnerability in the package @strikeentco/set version 1.0.0. The available connected documents describe the flaw as prototype pollution that allows an attacker to cause a denial of service and may lead to remote code execution. No explicit exploitatio...

7.5CVSS7.8AI score0.02291EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2020/11/10 12:00 a.m.•6 views

PT-2020-16957

Name of the Vulnerable Software and Affected Versions @strikeentco/set version 1.0.0 Description The issue allows an attacker to cause a denial of service and may lead to remote code execution due to a prototype pollution vulnerability. Recommendations For @strikeentco/set version 1.0.0, at the...

7.5CVSS0.02291EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/11/10 12:00 a.m.•9 views

CVE-2020-28267: Undefined Security Weakness

Prototype pollution vulnerability in '@strikeentco/set' version 1.0.0 allows attacker to cause a denial of service and may lead to remote code execution...

7.5CVSS6.2AI score0.02291EPSS
SaveExploits0References1
Rows per page
Query Builder