deeply project deeply vulnerabilities and exploits

(subscribe to this query)

9.8

CVSSv3

deeply is vulnerable to Prototype Pollution in versions prior to 3.1.0. The function assign-deep could be tricked into adding or modifying properties of Object.prototype using using a _proto_ payload.

Deeply Project Deeply

5.5

CVSSv3

systemd 250 and 251 allows local users to achieve a systemd-coredump deadlock by triggering a crash that has a long backtrace. This occurs in parse_elf_object in shared/elf-util.c. The exploitation methodology is to crash a binary calling the same function recursively, and put it...

Systemd Project Systemd Systemd Project Systemd 252 Fedoraproject Fedora 36

7.5

CVSSv3

The qs module prior to 1.0.0 does not have an option or default for specifying object depth and when parsing a string representing a deeply nested object will block the event loop for long periods of time. An attacker could leverage this to cause a temporary denial-of-service con...

Qs Project Qs

7.5

CVSSv3

An issue exists htmlcleaner thru = 2.28 allows malicious users to cause a denial of service or other unspecified impacts via crafted object that uses cyclic dependencies.

Htmlcleaner Project Htmlcleaner

8.8

CVSSv3

Hardlink prior to 0.1.2 suffer from multiple stack-based buffer overflow flaws because of the way directory trees with deeply nested directories are processed. A remote attacker could provide a specially-crafted directory tree, and trick the local user into consolidating it, lead...

Hardlink Project Hardlink Debian Debian Linux 8.0 Debian Debian Linux 9.0 Debian Debian Linux 10.0 Redhat Enterprise Linux 5.0 Redhat Enterprise Linux 6.0

9.1

CVSSv3

Authorization Bypass Through User-Controlled Key in GitHub repository emicklei/go-restful prior to v3.8.0.

Go-restful Project Go-restful Fedoraproject Fedora 35 Fedoraproject Fedora 36

1 Github repository

NA

Clam AntiVirus (ClamAV) 0.88.6 allows remote malicious users to bypass virus detection by inserting invalid characters into base64 encoded content in a multipart/mixed MIME file, as demonstrated with the EICAR test file.

Clam Anti-virus Clamav 0.88.6

NA

Clam AntiVirus (ClamAV) 0.88.6 allows remote malicious users to cause a denial of service (stack overflow and application crash) by wrapping many layers of multipart/mixed content around a document, a different vulnerability than CVE-2006-5874 and CVE-2006-6406.

Clam Anti-virus Clamav 0.88.6

7.5

CVSSv3

Uncontrolled recursion in Decoder.Decode in encoding/gob before Go 1.17.12 and Go 1.18.4 allows an malicious user to cause a panic due to stack exhaustion via a message which contains deeply nested structures.

Golang Go

Get Started

1 2 3 4 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook