All versions of package sey are vulnerable to Prototype Pollution via the deepmerge() function. Devamını Oku

All versions of package merge-deep2 are vulnerable to Prototype Pollution via the mergeDeep() function. Devamını Oku

All versions of package comb are vulnerable to Prototype Pollution via the deepMerge() function. Devamını Oku

The package md-to-pdf before 5.0.0 are vulnerable to Remote Code Execution (RCE) due to utilizing the library gray-matter to parse front matter content, without disabling…

All versions of package sey are vulnerable to Prototype Pollution via the deepmerge() function. Devamını Oku

All versions of package merge-deep2 are vulnerable to Prototype Pollution via the mergeDeep() function. Devamını Oku

The package com.h2database:h2 from 0 and before 2.0.202 are vulnerable to XML External Entity (XXE) Injection via the org.h2.jdbc.JdbcSQLXML class object, when it receives parsed…

The package com.h2database:h2 from 0 and before 2.0.202 are vulnerable to XML External Entity (XXE) Injection via the org.h2.jdbc.JdbcSQLXML class object, when it receives parsed…

A Cross Site Request Forgery (CSRF) vulnerability exits in ZZZCMS V1.7.1 via the save_user funciton in save.php. Devamını Oku

A Cross Site Scripting (XSS) exists in ZZZCMS V1.7.1 via an editfile action in save.php. Devamını Oku