Lucene search
+L

3984 matches found

Positive Technologies
Positive Technologies
•added 2022/08/04 12:00 a.m.•15 views

PT-2022-3981

Name of the Vulnerable Software and Affected Versions Apache Hadoop versions prior to 2.10.2 Apache Hadoop versions prior to 3.2.4 Apache Hadoop versions prior to 3.3.3 Description The issue is related to the FileUtil.unTarFile, File API in Apache Hadoop, which does not escape the input file name...

10CVSS9.9AI score0.04457EPSS
SaveExploits1References15
OpenVAS
OpenVAS
•added 2022/08/01 12:00 a.m.•25 views

Huawei EulerOS: Security Advisory for util-linux (EulerOS-SA-2022-2211)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS6.5AI score0.0043EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2022/08/01 12:00 a.m.•12 views

Fedora: Security Advisory for golang-vbom-util (FEDORA-2022-5038c3236c)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
OpenVAS
OpenVAS
•added 2022/08/01 12:00 a.m.•29 views

Huawei EulerOS: Security Advisory for util-linux (EulerOS-SA-2022-2192)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS6.5AI score0.0043EPSS
SaveExploits0References2
Fedora
Fedora
•added 2022/07/31 1:37 a.m.•19 views

[SECURITY] Fedora 36 Update: golang-vbom-util-0-0.12.20190520gitefcd4e0.fc36

Sort orders, comparison functions, and "heavy-weight string" utilities in Go...

7.3AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2022/07/31 12:00 a.m.•17 views

Fedora: Security Advisory for golang-github-bobesa-domain-util (FEDORA-2022-5ef0bd9a27)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
OpenVAS
OpenVAS
•added 2022/07/31 12:00 a.m.•16 views

Fedora: Security Advisory for golang-github-fvbommel-util (FEDORA-2022-ea8f4e232d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
SaveExploits0References2
Fedora
Fedora
•added 2022/07/30 1:55 a.m.•15 views

[SECURITY] Fedora 36 Update: golang-github-bobesa-domain-util-0-0.7.20200504git4033b5f.fc36

Handler for URL parts and identification of TLD and sub domains...

0.8AI score
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2022/07/29 12:00 a.m.•27 views

EulerOS Virtualization 2.9.0 : util-linux (EulerOS-SA-2022-2211)

According to the versions of the util-linux packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an...

5.5CVSS6.1AI score0.0043EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2022/07/29 12:00 a.m.•26 views

EulerOS Virtualization 2.9.1 : util-linux (EulerOS-SA-2022-2192)

According to the versions of the util-linux packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - A flaw was found in the util-linux chfn and chsh utilities when compiled with Readline support. The Readline library uses an...

5.5CVSS6.1AI score0.0043EPSS
SaveExploits0References2
Veracode
Veracode
•added 2022/07/18 4:25 a.m.•32 views

Prototype Pollution

grunt-util-property is vulnerable to prototype pollution. An attacker is able to inject properties into existing construct prototypes and modify attributes such as proto, constructor and prototype...

7.8CVSS7.3AI score0.00379EPSS
SaveExploits1References2Affected Software1
osv_ghsa
osv_ghsa
•added 2022/07/18 12:00 a.m.•9 views

GHSA-4HQ8-JGR8-MW9J grunt-util-property 0.0.2 function call can add/modify properties of Object.prototype using a __proto__ payload

This affects all versions of package grunt-util-property. The function call could be tricked into adding or modifying properties of Object.prototype using a proto payload...

7.8CVSS5.8AI score0.00379EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
•added 2022/07/18 12:00 a.m.•44 views

grunt-util-property 0.0.2 function call can add/modify properties of Object.prototype using a __proto__ payload

This affects all versions of package grunt-util-property. The function call could be tricked into adding or modifying properties of Object.prototype using a proto payload...

7.8CVSS7.3AI score0.00379EPSS
SaveExploits1References4Affected Software1
vulnersOsv
vulnersOsv
•added 2022/07/18 12:00 a.m.•6 views

grunt-git-describe (>=2.3.1, <=2.4.4), grunt-git-describe-plus (2.3.3-0) +3 more potentially affected by CVE-2020-7641 via grunt-util-property (0.0.2)

grunt-util-property NPM version 0.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on grunt-util-property and may be impacted: - grunt-git-describe =2.3.1, =0.1.5, =0.0.1, =0.0.4 Source cves: CVE-2020-7641 Source advisory: OSV:GHSA-4HQ8-JGR8-MW9J...

7.8CVSS7.4AI score0.00379EPSS
SaveExploits1
OpenVAS
OpenVAS
•added 2022/07/18 12:00 a.m.•15 views

Fedora: Security Advisory for golang-github-fvbommel-util (FEDORA-2022-3969b64d4b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.3CVSS8.9AI score0.0995EPSS
SaveExploits4References2
OpenVAS
OpenVAS
•added 2022/07/18 12:00 a.m.•26 views

Fedora: Security Advisory for golang-github-bobesa-domain-util (FEDORA-2022-3969b64d4b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.3CVSS8.9AI score0.0995EPSS
SaveExploits4References2
OpenVAS
OpenVAS
•added 2022/07/18 12:00 a.m.•24 views

Fedora: Security Advisory for golang-vbom-util (FEDORA-2022-3969b64d4b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.3CVSS8.9AI score0.0995EPSS
SaveExploits4References2
osv_cve
osv_cve
•added 2022/07/17 9:15 a.m.•21 views

CVE-2020-7641

This affects all versions of package grunt-util-property. The function call could be tricked into adding or modifying properties of Object.prototype using a proto payload...

7.8CVSS5.8AI score0.00379EPSS
SaveExploits1References2
CVE
CVE
•added 2022/07/17 8:40 a.m.•64 views

CVE-2020-7641

CVE-2020-7641 affects the npm package grunt-util-property (all versions). The vulnerability is prototype pollution: the function call could be tricked into adding or modifying properties of Object.prototype using a proto payload, enabling an attacker to modify base object behavior. Public descrip...

7.8CVSS5.7AI score0.00379EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2022/07/17 8:40 a.m.•45 views

CVE-2020-7641 Prototype Pollution

This affects all versions of package grunt-util-property. The function call could be tricked into adding or modifying properties of Object.prototype using a proto payload...

4CVSS7.6AI score0.00379EPSS
SaveExploits1References2
Rows per page
Query Builder