GHSA-WXFJ-84XF-7GXV mde utilities contains Prototype Pollution

All versions of the package utilities are vulnerable to Prototype Pollution via the mix function...

10.13zy1 (1.0.0), @luminati-io/jake (>=8.0.10-lum.0, <=8.0.10-lum.2) +43 more potentially affected by CVE-2023-26105 via utilities (>=1.0.4, <=1.0.6)

utilities NPM version =1.0.4, =8.0.10-lum.0, =8.0.19-sync, =2.1.0, =0.0.1-preview.3, =1.0.0, =0.0.1, =1.0.70, =0.0.1, =1.0.0, =1.0.39 and more Source cves: CVE-2023-26105 Source advisory: OSV:GHSA-WXFJ-84XF-7GXV...

mde utilities contains Prototype Pollution

All versions of the package utilities are vulnerable to Prototype Pollution via the mix function...

CVE-2023-26105

All versions of the package utilities are vulnerable to Prototype Pollution via the mix function...

CVE-2023-26105

All versions of the package utilities are vulnerable to Prototype Pollution via the mix function...

CVE-2023-26105

All versions of the package utilities are vulnerable to Prototype Pollution via the mix function...

CVE-2023-26105

All versions of the package utilities are vulnerable to Prototype Pollution via the mix function...

CVE-2023-26105

All versions of the package utilities are vulnerable to Prototype Pollution via the mix function...

CVE-2023-26105

CVE-2023-26105 affects all versions of the mde utilities package. The root cause is a vulnerability in the _mix function used during object merging, enabling prototype pollution with high impact (CVSS v3.1: 7.5, AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). Multiple advisories and records (NVD, Red Hat, ...

Siemens JT Open Toolkit 安全漏洞

Siemens JT Open Toolkit Siemens JTTK is a C++ application programming interface API from Siemens, Germany. It provides support for 64-bit application development on Microsoft Windows, Linux and MacOS. A security vulnerability exists in Siemens JT Open Toolkit, JT Utilities, and Parasolid, which...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that originates from a privilege bypass in resolveAttributionSource of ServiceUtilities.cpp, which can be exploited by an attacker to gain elevated...

PT-2023-20492

Name of the Vulnerable Software and Affected Versions utilities affected versions not specified Description The issue concerns Prototype Pollution via the mix function. This affects all versions of the package utilities. There is no information provided about the estimated number of potentially...

CVE-2023-26105: Improperly Controlled Modification of Object Prototype Attributes

All versions of the package utilities are vulnerable to Prototype Pollution via the mix function...

mde utilities 安全漏洞

mde utilities is a classic collection of JavaScript utilities. A security vulnerability exists in mde utilities that stems from the presence of a prototype contamination vulnerability...

K35040315: glibc vulnerability CVE-2016-10739

Security Advisory Description In the GNU C Library aka glibc or libc6 through 2.28, the getaddrinfo function would successfully parse a string that contained an IPv4 address followed by whitespace and arbitrary characters, which could lead applications to incorrectly assume that it had parsed a...

Malicious Package

Overview @realty-front/webpack-utils is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if th...

Malicious Package

Overview arcgis-charts-shared-utils is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if thi...

Google Reveals Alarming Surge in Russian Cyber Attacks Against Ukraine

Russia's cyber attacks against Ukraine surged by 250% in 2022 when compared to two years ago, Google's Threat Analysis Group TAG and Mandiant disclosed in a new joint report. The targeting, which coincided and has since persisted following the country's military invasion of Ukraine in February...

Siemens JT Open and JT Utilitiesh Memory Corruption Vulnerability

JT Open Toolkit is an application programming interface API for software developers who support JT, a publicly released data format developed by Siemens Digital Industry Software and widely used for communication, visualization, digital modeling, and various other purposes.Siemens JT Open and JT...

CISA Releases Fifteen Industrial Control Systems Advisories

CISA released fifteen 15 Industrial Control Systems ICS advisories on February 16, 2023. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. CISA encourages users and administrators to review the newly released ICS advisories f...