4542 matches found
@dudadev/zip-modifier-utils (=1.1.0), @newsssticketing/common (>=1.0.4 <=1.0.16) +4 more potentially affected by unknown CVE via experss (=0.0.1-security)
experss NPM version =0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on experss and may be impacted: - @dudadev/zip-modifier-utils =1.1.0 - @newsssticketing/common =1.0.4, =2.0.1, =1.0.2, =1.0.6 Source cves: unknown CVE Source advisory:...
GHSA-RFFP-MC78-WJF7 Command Injection in cocos-utils
All versions of cocos-utils are vulnerable to Remote Code Execution. The unzip function concatenates user input to exec which may allow attackers to execute arbitrary commands on the server. Recommendation No fix is currently available. Consider using an alternative module until a fix is made...
Prototype Pollution
nodee-utils is vulnerable to prototype pollution. The vulnerability exists as it does not restrict the proto header to be set through the deepSet function...
CVE-2020-7722
All versions of package nodee-utils are vulnerable to Prototype Pollution via the deepSet function...
Design/Logic Flaw
All versions of package nodee-utils are vulnerable to Prototype Pollution via the deepSet function...
CVE-2020-7722 Prototype Pollution
All versions of package nodee-utils are vulnerable to Prototype Pollution via the deepSet function...
PT-2020-19743 · Node.Js · Nodee-Utils
Name of the Vulnerable Software and Affected Versions: nodee-utils versions prior to 1.2.3 Description: The issue concerns Prototype Pollution via the deepSet function. This allows for potential manipulation of object properties, which can lead to various security issues. Recommendations: For...
Huawei EulerOS: Security Advisory for nfs-utils (EulerOS-SA-2020-1871)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP8 : nfs-utils (EulerOS-SA-2020-1871)
According to the version of the nfs-utils packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The nfs-utils package in SUSE Linux Enterprise Server 12 before and including version 1.3.0-34.18.1 and in SUSE Linux Enterprise Server 15 befor...
CVE-2020-7703
All versions of package nis-utils are vulnerable to Prototype Pollution via the setValue function...
Design/Logic Flaw
All versions of package nis-utils are vulnerable to Prototype Pollution via the setValue function...
CVE-2020-7703
CVE-2020-7703 affects nis-utils. Vulnerability: Prototype Pollution via the setValue function in all versions up to 0.6.10. Root cause: unsafe handling of input in setValue enabling modification of Object.prototype. Impact: high to critical potential (as per CVSS in sources) including potential D...
CVE-2020-7703 Prototype Pollution
All versions of package nis-utils are vulnerable to Prototype Pollution via the setValue function...
Prototype Pollution
Overview nis-utils is a set of useful helpers Affected versions of this package are vulnerable to Prototype Pollution via the setValue function. POC const nisUtils = require'nis-utils'; nisUtils.object.setValue, 'proto.polluted', true; console.logpolluted; Details Prototype Pollution is a...
PT-2020-19726 · Nis-Utils · Nis-Utils
Name of the Vulnerable Software and Affected Versions: nis-utils versions up to and including 0.6.10 Description: The issue concerns Prototype Pollution via the setValue function. This affects all versions of the package up to and including 0.6.10. Recommendations: For versions up to and includin...
CVE-2020-7701
madlib-object-utils before 0.1.7 is vulnerable to Prototype Pollution via setValue...
CVE-2020-7701
madlib-object-utils before 0.1.7 is vulnerable to Prototype Pollution via setValue...
Code injection
madlib-object-utils before 0.1.7 is vulnerable to Prototype Pollution via setValue...