Most recent entries from all

bdu:2022-06476

certfr-2021-avi-490 — De multiples vulnérabilités ont été découvertes dans IBM Spectrum Protect. Certaines d'entre elles permettent à un atta…

certfr-2021-avi-490

EUVD-2026-258290

fkie_cve-2021-23358

The package underscore from 1.13.0-0 and before 1.13.0-2, from 1.3.2 and before 1.12.1 are vulnerable to Arbitrary Code Injection via the template function, particularly when a variable property is passed as an argument as it is not sanitized.

GHSA-cf4h-3jhx-xvhq — Arbitrary Code Execution in underscore

Affected: npm: underscore

The package `underscore` from 1.13.0-0 and before 1.13.0-2, from 1.3.2 and before 1.12.1 are vulnerable to Arbitrary Code Execution via the template function, particularly when a variable property is passed as an argument as it is not sanitized.

gsd-2021-23358

msrc_CVE-2021-23358 — Arbitrary Code Injection

msrc_CVE-2021-23358

OESA-2021-1174 — nodejs-underscore security update

Affected: openEuler:20.03-LTS-SP1: nodejs-underscore

Underscore.js is a utility-belt library for JavaScript that provides support for the usual functional suspects (each, map, reduce, filter...) without extending any core JavaScript objects. Security Fix(es): The package underscore from 1.13.0-0 and before 1.13.0-2, from 1.3.2 and before 1.12.1 are vulnerable to Arbitrary Code Injection via the template function, particularly when a variable property is passed as an argument as it is not sanitized.(CVE-2021-23358)

openSUSE-SU-2021:0601-1 — Security update for nodejs-underscore

Security update for nodejs-underscore

OXAS-ADV-2025-0001 — OX App Suite Security Advisory OXAS-ADV-2025-0001

OXAS-ADV-2025-0001

RHSA-2021:1448 — Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.0.10 security and bug fix updates

nodejs-underscore: Arbitrary code execution via the template function

UBUNTU-CVE-2021-23358

Affected: Ubuntu:Pro:14.04:LTS: underscore, Ubuntu:16.04:LTS: underscore, Ubuntu:18.04:LTS: underscore, Ubuntu:20.04:LTS: underscore

WID-SEC-W-2022-1354 — Red Hat Enterprise Linux: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux ausnutzen, um beliebigen Programmcode auszuführen, Informationen offenzulegen, einen Denial of Service Zustand herbeizuführen, Dateien zu manipulieren oder Sicherheitsvorkehrungen zu umgehen.