Lucene search
K

8 matches found

Cvelist
Cvelist
added 2022/04/01 10:17 p.m.11 views

CVE-2021-27493 Philips Vue PACS

Philips Vue PACS versions 12.2.x.x and prior does not ensure or incorrectly ensures structured messages or data are well formed and that certain security properties are met before being read from an upstream component or sent to a downstream component...

6.1CVSS6.6AI score0.00162EPSS
Exploits0References2
Node.js
Node.js
added 2021/08/03 4:53 p.m.39 views

Improperly Controlled Modification of Object Prototype Attributes

Overview think-logic before version 1.1.3 has a prototype pollution vulnerability. Impact The software receives input from an upstream component that specifies attributes that are to be initialized or updated in an object, but it does not properly control modifications of attributes of the object...

6.8AI score
Exploits0Affected Software1
Github Security Blog
Github Security Blog
added 2021/08/03 4:48 p.m.47 views

Improperly Controlled Modification of Object Prototype Attributes

Impact The software receives input from an upstream component that specifies attributes that are to be initialized or updated in an object, but it does not properly control modifications of attributes of the object prototype. Patches [email protected] patched it, anyone used think-config should...

1.7AI score
Exploits0References2Affected Software1
OSV
OSV
added 2021/08/03 4:48 p.m.10 views

GHSA-6CJ2-92M5-7MVP Improperly Controlled Modification of Object Prototype Attributes

Impact The software receives input from an upstream component that specifies attributes that are to be initialized or updated in an object, but it does not properly control modifications of attributes of the object prototype. Patches [email protected] patched it, anyone used think-config should...

7.5CVSS6.9AI score
Exploits0References2
OSV
OSV
added 2021/07/01 5:1 p.m.19 views

GHSA-VR5M-3H59-7JCP Prototype Pollution in think-helper

Impact The software receives input from an upstream component that specifies attributes that are to be initialized or updated in an object, but it does not properly control modifications of attributes of the object prototype. Patches [email protected] patched it, anyone used think-helper should...

7.5CVSS7.5AI score0.00212EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2021/07/01 5:1 p.m.54 views

Prototype Pollution in think-helper

Impact The software receives input from an upstream component that specifies attributes that are to be initialized or updated in an object, but it does not properly control modifications of attributes of the object prototype. Patches [email protected] patched it, anyone used think-helper should...

7.5CVSS2.5AI score0.00212EPSS
Exploits0References3Affected Software1
NVD
NVD
added 2021/06/30 6:15 p.m.7 views

CVE-2021-32736

think-helper defines a set of helper functions for ThinkJS. In versions of think-helper prior to 1.1.3, the software receives input from an upstream component that specifies attributes that are to be initialized or updated in an object, but it does not properly control modifications of attributes...

7.5CVSS0.00212EPSS
Exploits0References1
Prion
Prion
added 2021/06/30 6:15 p.m.6 views

Input validation

think-helper defines a set of helper functions for ThinkJS. In versions of think-helper prior to 1.1.3, the software receives input from an upstream component that specifies attributes that are to be initialized or updated in an object, but it does not properly control modifications of attributes...

5CVSS7.4AI score0.00212EPSS
Exploits0References1Affected Software1
Rows per page
Query Builder