1796 matches found
GHSA-WPGH-HMV4-R3V5 Prototype pollution in safe-obj
Prototype pollution vulnerability in 'safe-obj' versions 1.0.0 through 1.0.2 allows an attacker to cause a denial of service and may lead to remote code execution...
Mpmath 安全漏洞
Mpmath is a free BSD-licensed Python library for real and complex floating-point operations with arbitrary precision. A security vulnerability exists in Mpmath version 1.0.0, which stems from a Regular Expression Denial of Service ReDOS that occurs when an application examines a carefully crafted...
runc security update
1.0.0-1.rc95 - Addresses CVE-2021-30465...
TP-Link TL-SG2005和TP-Link TL-SG2008 输入验证错误漏洞
Tp-link TP-Link TL-SG2005 and TP-Link TL-SG2008 are both switches from Tp-link. A security vulnerability exists in TP-Link TL-SG2005 and TL-SG2008. The vulnerability originates from version 1.0.0 of TL-SG2005 and TL-SG2008, which is affected by an array indexing error, whereby the interfaces that...
Improper Neutralization of Special Elements used in a Command ('Command Injection') in @floffah/build
Impact If you are using the esbuild target or command you are at risk of code/option injection. Attackers can use the command line option to maliciously change your settings in order to damage your project. Patches The problem has been patched in v1.0.0 as it uses a proper method to pass configs ...
CVE-2021-20391
IBM QRadar User Behavior Analytics 1.0.0 through 4.1.0 allows web pages to be stored locally which can be read by another user on the system. IBM X-Force ID: 195999...
IBM QRadar SIEM 安全漏洞
IBM QRadar SIEM is an IBM USA solution that utilizes security intelligence to protect assets and information from advanced threats. The solution provides oversight of the entire scope of the IT architecture, generates detailed reports on data access and user activity, and more. An information...
GHSA-G4HJ-R7R3-9RWV OS Command Injection in gulp-scss-lint
gulp-scss-lint through 1.0.0 allows execution of arbitrary commands. It is possible to inject arbitrary commands to the "exec" function located in "src/command.js" via the provided options...
GHSA-X67X-98X7-WV26 OS Command Injection in gulp-tape
gulp-tape through 1.0.0 allows execution of arbitrary commands. It is possible to inject arbitrary commands as part of gulp-tape options...
Prototype Pollution in worksmith
All versions up to and including 1.0.0 of the package worksmith are vulnerable to Prototype Pollution via the setValue function...
PT-2021-12083 · Revel · Revel
Name of the Vulnerable Software and Affected Versions: revel versions prior to 1.0.0 Description: The issue is caused by unsanitized input in the query parser, allowing remote attackers to cause resource exhaustion via memory allocation. An attacker can manipulate the request query sent to an...
Prototype Pollution
Overview Prototype pollution vulnerability in set-or-get version 1.0.0 through 1.2.10 allows an attacker to cause a denial of service and may lead to remote code execution. Recommendation Upgrade to version 1.2.11 or later References - CVE - WhiteSource Advisory...
GHSA-6RV4-4QV6-88G2 Prototype Pollution in set-or-get
Prototype pollution vulnerability in ‘set-or-get’ version 1.0.0 through 1.2.10 allows an attacker to cause a denial of service and may lead to remote code execution...
Paul Humphreys patchmerge 安全漏洞
Paul Humphreys patchmerge is Paul Humphreys an open source application . Provides an implementation of JSON Merge Patch RFC 7396 with extensions to support merging arrays of objects . A security vulnerability exists in patchmerge versions 1.0.0 through 1.0.1 that can be exploited by an attacker t...
sn-cicd (>=4.6.12 <=4.6.17) potentially affected by CVE-2021-23372 via mongo-express (=1.0.0-alpha.1)
mongo-express NPM version =1.0.0-alpha.1 is affected by a known vulnerability. The following packages have a transitive dependency on mongo-express and may be impacted: - sn-cicd =4.6.12, =4.6.17 Source cves: CVE-2021-23372 Source advisory: SNYK:JS-MONGOEXPRESS-1085403...
CVE-2021-21331
The Java client for the Datadog API before version 1.0.0-beta.9 has a local information disclosure of sensitive information downloaded via the API using the API Client. The Datadog API is executed on a unix-like system with multiple users. The API is used to download a file containing sensitive...
GHSA-2CXF-6567-7PP6 Local Information Disclosure Vulnerability
Impact Local information disclosure of sensitive information downloaded via the API using the API Client. Finding The Datadog API is executed on a unix-like system with multiple users. The API is used to download a file containing sensitive information. This sensitive information is exposed local...
Datadog API 安全漏洞
Github datadog-api-client-java is Github an open source application . Provides a JAVA API interface. Datadog API before version 1.0.0-beta.9 A security vulnerability exists in the Datadog API before version 1.0.0-beta.9, which stems from a local disclosure of sensitive information downloaded...
Jenkins Artifact Repository Parameter 跨站脚本漏洞
Jenkins Artifact Repository Parameter is a Jenkins open source application plugin . Provides to make the artifact repository of certain information can be used as Jenkins build parameters. A cross-site script execution vulnerability exists in Jenkins Artifact Repository Parameter Plugin 1.0.0 and...
