Skip to content
OpenAdvisories

Archive

8 February 2021

Vulnerabilities first published on this day (UTC), newest first.

6 results · Clear filters · Feed

  • Critical 9.8

    Prototype Pollution in set-or-get

    Prototype pollution vulnerability in 'set-or-get' version 1.0.0 through 1.2.10 allows an attacker to cause a denial of service and may lead to remote code execution.

  • Critical 9.8
    CVE-2021-22502 Exploited Public exploit Scanner template EPSS 97%

    Remote Code execution vulnerability in Micro Focus Operation Bridge Reporter (OBR) product, affecting version 10.40. Th…

    KEV Nov 3, 2021
  • Critical 9.8

    Command Injection

    This affects all versions of package macfromip. The injection point is located in line 66 in macfromip.js.

  • Critical 9.8

    Command Injection

    This affects all versions of package spritesheet-js. It depends on a vulnerable package platform-command. The injection point is located in line 32 in lib/generator.js, which is triggered by main entry of the package.

  • Critical 9.8

    Command Injection

    This affects all versions of package node-ps. The injection point is located in line 72 in lib/index.js.

  • Critical 9.8

    Command injection in gitlog

    The gitlog function in src/index.ts in gitlog before 4.0.4 has a command injection vulnerability.