1262 matches found
UBUNTU-CVE-2020-24829
An issue was discovered in GPAC from v0.5.2 to v0.8.0, as demonstrated by MP4Box. It contains a heap-based buffer overflow in gfm2tssectioncomplete in mediatools/mpegts.c that can cause a denial of service DOS via a crafted MP4 file...
GPAC MP4Box code issue vulnerability
GPAC MP4Box is a multimedia packager. It is mainly used to process ISOBMF files e.g. MP4, 3GP, but can also be used to import/export media from AVI, MPG, MKV, MPEG-2 TS and other container files.GPAC MP4Box version 0.8.0 has a security vulnerability, which stems from an issue found in...
Unspecified vulnerability in ts-nodash
ts-nodash is a tool that provides object manipulation. A security vulnerability exists in ts-nodash that stems from a lack of validated input, and all versions of package -nodash are vulnerable to prototype contamination via the Merge function. No detailed vulnerability details are provided at th...
CVE-2021-23403
All versions of package ts-nodash are vulnerable to Prototype Pollution via the Merge function due to lack of validation input...
CVE-2021-23403
All versions of package ts-nodash are vulnerable to Prototype Pollution via the Merge function due to lack of validation input...
Input validation
All versions of package ts-nodash are vulnerable to Prototype Pollution via the Merge function due to lack of validation input...
CVE-2021-23403
CVE-2021-23403 affects the npm package ts-nodash. All versions before 1.2.7 are vulnerable to a prototype pollution via the Merge() function due to lack of input validation. The root cause is unsafe merging that can inject proto -level properties into objects, enabling potential DoS or remote cod...
CVE-2021-23403 Prototype Pollution
All versions of package ts-nodash are vulnerable to Prototype Pollution via the Merge function due to lack of validation input...
CVE-2021-23403
All versions of package ts-nodash are vulnerable to Prototype Pollution via the Merge function due to lack of validation input...
ts-nodash 安全漏洞
ts-nodash is a tool that provides object manipulation. A security vulnerability exists in ts-nodash that stems from a lack of validated input, and all versions of package -nodash are vulnerable to prototype contamination via the Merge function. No detailed vulnerability details are provided at th...
Prototype Pollution
Overview ts-nodash is a Provides object manipulation tools. Affected versions of this package are vulnerable to Prototype Pollution via the Merge function due to lack of validation input. PoC const nodash = require"ts-nodash"; let obj = ; console.log"Before being polluted: " + obj.polluted; var...
SUSE: Security Advisory (SUSE-SU-2016:3044-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-28812
A command injection vulnerability has been reported to affect certain versions of Video Station. If exploited, this vulnerability allows remote attackers to execute arbitrary commands. This issue affects: QNAP Systems Inc. Video Station versions prior to 5.5.4 on QTS 4.5.2; versions prior to 5.5....
CVE-2021-28806
A DOM-based XSS vulnerability has been reported to affect QNAP NAS running QTS and QuTS hero. If exploited, this vulnerability allows attackers to inject malicious code. This issue affects: QNAP Systems Inc. QTS versions prior to 4.5.3.1652 Build 20210428. QNAP Systems Inc. QuTS hero versions pri...
QNAP NAS 安全漏洞
A security vulnerability exists in QNAP NAS that stems from a relative path traversal vulnerability that can be exploited by an attacker to modify files affecting the integrity of the system.QNAP has fixed this vulnerability in the following versions:QTS 4.5.2.1630 Build 20210406 and later QTS...
Command Injection
Overview All versions of package ts-process-promises are affected by a command injection vulnerability. The injection point is located in line 45 in main entry of package in lib/process-promises.js. Recommendation Since there is currently no fix version, discontinue use of the ts-process-promises...
Fishcharlie Amazon Dynamoose Security Breach
Fishcharlie Amazon Dynamoose is a modeling tool from the Fishcharlie organization in the United States. A modeling tool for Amazon DynamoDB is provided. Fishcharlie Amazon Dynamoose has a security vulnerability in versions prior to 2.0.0 and 2.7.0 that stems from a prototype contamination...
CVE-2020-36220
An issue was discovered in the va-ts crate before 0.0.4 for Rust. Because Demuxer omits a required T: Send bound, a data race and memory corruption can occur...