An information disclosure vulnerability exists in the Ethernet/IP UDP handler functionality of EIP Stack Group OpENer 2.3 and development commit 8c73bf3. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Buffer Overflow
Information Disclosure
Opener
NVD
CVSS 3.1
10.0
EPSS
1.7%
All versions of package lutils are vulnerable to Prototype Pollution via the main (merge) function. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Prototype Pollution
Information Disclosure
Lutils
NVD
CVSS 3.1
9.8
EPSS
1.0%