Most recent entries from all

bdu:2021-02899

certfr-2023-avi-0428 — De multiples vulnérabilités ont été découvertes dans les produits Splunk. Certaines d'entre…

certfr-2023-avi-0428

cnvd-2020-41782

EUVD-2026-59791

fkie_cve-2019-20149

ctorName in index.js in kind-of v6.0.2 allows external user input to overwrite certain internal attributes via a conflicting name, as demonstrated by 'constructor': {'name':'Symbol'}. Hence, a crafted payload can overwrite this builtin attribute to manipulate the type detection result.

GHSA-6c8f-qphg-qjgp — Validation Bypass in kind-of

Affected: npm: kind-of

Versions of `kind-of` 6.x prior to 6.0.3 are vulnerable to a Validation Bypass. A maliciously crafted object can alter the result of the type check, allowing attackers to bypass the type checking validation.

## Recommendation

Upgrade to versions 6.0.3 or later.

gsd-2019-20149

msrc_CVE-2019-20149 — ctorName in index.js in kind-of v6.0.2 allows external user input to overwrite certain internal attributes via a confli…

msrc_CVE-2019-20149

RHSA-2021:3454 — Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.3.2 security and bug fix update

nodejs-kind-of: ctorName in index.js allows external user input to overwrite certain internal attributes

UBUNTU-CVE-2019-20149

Affected: Ubuntu:18.04:LTS: node-kind-of

WID-SEC-W-2023-1350 — Splunk Splunk Enterprise: Mehrere Schwachstellen in Komponenten von Drittanbietern

Ein Angreifer kann mehrere Schwachstellen in Splunk Splunk Enterprise in diversen Komponenten von Drittanbietern ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen.