Lucene search
K

28 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.4 views

EUVD-2023-0883

Malicious code in bioql PyPI...

8.8CVSS8.6AI score0.00614EPSS
Exploits0References5
Rockylinux
Rockylinux
added 2024/09/17 12:55 a.m.17 views

glib2 security update

An update is available for glib2. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list GLib provides the core application building blocks for libraries and applicatio...

5.2CVSS7AI score0.00763EPSS
Exploits1
OSV
OSV
added 2024/04/30 12:0 a.m.36 views

ALSA-2024:2528 Low: mingw-glib2 security update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fixes: glib: GVariant offset table...

7.5CVSS6.7AI score0.00774EPSS
Exploits0References10
OSV
OSV
added 2024/03/25 5:15 a.m.12 views

CVE-2024-21505

Versions of the package web3-utils before 4.2.1 are vulnerable to Prototype Pollution via the utility functions format and mergeDeep, due to insecure recursive merge. An attacker can manipulate an object's prototype, potentially leading to the alteration of the behavior of all objects inheriting...

7.5CVSS7.1AI score
Exploits0References2
CVE
CVE
added 2024/03/25 5:0 a.m.59 views

CVE-2024-21505

CVE-2024-21505 affects the web3-utils package: versions prior to 4.2.1 are vulnerable to a Prototype Pollution issue in the recursive merge via the helper functions format and mergeDeep . An attacker can alter an object’s prototype, potentially changing behavior of all objects inheriting from it....

7.5CVSS7.5AI score0.00712EPSS
Exploits0References2
Cvelist
Cvelist
added 2024/03/25 5:0 a.m.17 views

CVE-2024-21505

Versions of the package web3-utils before 4.2.1 are vulnerable to Prototype Pollution via the utility functions format and mergeDeep, due to insecure recursive merge. An attacker can manipulate an object's prototype, potentially leading to the alteration of the behavior of all objects inheriting...

7.5CVSS7.8AI score0.00712EPSS
Exploits0References2
OSV
OSV
added 2024/03/06 10:59 a.m.25 views

BIT-NODE-2023-39331

A previously disclosed vulnerability CVE-2023-30584 was patched insufficiently in commit 205f1e6. The new path traversal vulnerability arises because the implementation does not protect itself against the application overwriting built-in utility functions with user-defined implementations. Please...

7.7CVSS8.1AI score0.01325EPSS
Exploits0References4
Veracode
Veracode
added 2024/01/24 1:18 p.m.15 views

Prototype Pollution

hoolock is vulnerable to Prototype Pollution. The vulnerability is due to utility functions failing to block attempts to access or alter object prototypes. An attacker can modify application data or perform a Denial of Service by exploiting this vulnerability...

6.5CVSS6.7AI score0.01007EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2024/01/23 2:43 p.m.11 views

GHSA-4C2G-HX49-7H25 Prototype pollution not blocked by object-path related utilities in hoolock

Impact Utility functions related to object paths get, set and update did not block attempts to access or alter object prototypes. Patches The get, set and update functions will throw a TypeError when a user attempts to access or alter inherited properties in versions =2.2.1...

6.3CVSS6.3AI score0.01007EPSS
Exploits0References4
Github Security Blog
Github Security Blog
added 2024/01/23 2:43 p.m.14 views

Prototype pollution not blocked by object-path related utilities in hoolock

Impact Utility functions related to object paths get, set and update did not block attempts to access or alter object prototypes. Patches The get, set and update functions will throw a TypeError when a user attempts to access or alter inherited properties in versions =2.2.1...

6.5CVSS7AI score0.01007EPSS
Exploits0References4Affected Software1
NVD
NVD
added 2023/10/18 4:15 a.m.21 views

CVE-2023-39331

A previously disclosed vulnerability CVE-2023-30584 was patched insufficiently in commit 205f1e6. The new path traversal vulnerability arises because the implementation does not protect itself against the application overwriting built-in utility functions with user-defined implementations. Please...

7.7CVSS8.5AI score0.01325EPSS
Exploits0References3
UbuntuCve
UbuntuCve
added 2023/10/18 4:15 a.m.42 views

CVE-2023-39331

A previously disclosed vulnerability CVE-2023-30584 was patched insufficiently in commit 205f1e6. The new path traversal vulnerability arises because the implementation does not protect itself against the application overwriting built-in utility functions with user-defined implementations. Please...

7.7CVSS6.8AI score0.01325EPSS
Exploits0References2
Cvelist
Cvelist
added 2023/10/18 3:55 a.m.23 views

CVE-2023-39331

A previously disclosed vulnerability CVE-2023-30584 was patched insufficiently in commit 205f1e6. The new path traversal vulnerability arises because the implementation does not protect itself against the application overwriting built-in utility functions with user-defined implementations. Please...

7.7CVSS8.7AI score0.01325EPSS
Exploits0References2
AlpineLinux
AlpineLinux
added 2023/10/18 3:55 a.m.44 views

CVE-2023-39331

A previously disclosed vulnerability CVE-2023-30584 was patched insufficiently in commit 205f1e6. The new path traversal vulnerability arises because the implementation does not protect itself against the application overwriting built-in utility functions with user-defined implementations. Please...

7.7CVSS6.9AI score0.01325EPSS
Exploits0
OSV
OSV
added 2022/11/15 12:0 a.m.43 views

ALSA-2022:8418 Low: mingw-glib2 security and bug fix update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fixes: glib: gfilereplace with...

5.3CVSS6.8AI score0.02622EPSS
Exploits1References4
OSV
OSV
added 2021/11/09 9:43 a.m.39 views

ALSA-2021:4526 Important: mingw-glib2 security, bug fix, and enhancement update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. The following packages have been upgraded to...

7.5CVSS7.5AI score0.04193EPSS
Exploits1References2
OSV
OSV
added 2021/11/09 9:16 a.m.45 views

ALSA-2021:4385 Moderate: glib2 security and bug fix update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fixes: glib2: Possible privilege...

5.5CVSS6.4AI score0.02622EPSS
Exploits2References2
OSV
OSV
added 2021/08/10 11:56 a.m.33 views

RLSA-2021:3058 Moderate: glib2 security update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fixes: glib: integer overflow in...

7.5CVSS8.2AI score0.04193EPSS
Exploits0References2
RedHat Linux
RedHat Linux
added 2021/06/01 11:27 a.m.62 views

Important: Red Hat Security Advisory: glib2 security update

An update for glib2 is now available for Red Hat Enterprise Linux 7.4 Advanced Update Support, Red Hat Enterprise Linux 7.4 Telco Extended Update Support, and Red Hat Enterprise Linux 7.4 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact...

7.5CVSS7.2AI score0.02876EPSS
Exploits1References2
AlmaLinux
AlmaLinux
added 2021/06/01 9:4 a.m.48 views

Important: glib2 security and bug fix update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. Security Fixes: glib: integer overflow in...

7.5CVSS8.2AI score0.02876EPSS
Exploits1References1
Rows per page
Query Builder