CVE-2019-10808

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

utilitify prior to 1.0.3 allows modification of object properties. The merge method could be tricked into adding or modifying properties of the Object.prototype.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-1321

Affected software

No affected versions have been published.

Timeline

Published
Mar 11, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-10814.2An information disclosure vulnerability exists when affected Microsoft browsers improperly handle objects in memory. An attacker who successCVE-2019-10827.8An elevation of privilege vulnerability exists in Microsoft Windows where a certain DLL, with Local Service privilege, is vulnerable to raceCVE-2019-10837.5A denial of service vulnerability exists when Microsoft Common Object Runtime Library improperly handles web requests, aka '.NET Denial of SCVE-2019-10846.5An information disclosure vulnerability exists when Exchange allows creation of entities with Display Names having non-printable characters.CVE-2019-108429.8Arbitrary code execution (via backdoor code) was discovered in bootstrap-sass 3.2.0.3, when downloaded from rubygems.org. An unauthenticatedCVE-2019-108449.8nbla/logger.cpp in libnnabla.a in Sony Neural Network Libraries (aka nnabla) through v1.0.14 relies on the HOME environment variable, which CVE-2019-108456.5An issue was discovered in Uniqkey Password Manager 1.14. When entering new credentials to a site that isn't registered within this product,CVE-2019-108466.1Computrols CBAS 18.0.0 allows Unauthenticated Reflected Cross-Site Scripting vulnerabilities in the login page and password reset page via tCVE-2019-108478.8Computrols CBAS 18.0.0 allows Cross-Site Request Forgery.CVE-2019-108485.3Computrols CBAS 18.0.0 allows Username Enumeration.CVE-2019-108497.5Computrols CBAS 18.0.0 allows unprotected Subversion (SVN) directory / source code disclosure.CVE-2019-10857.8An elevation of privilege vulnerability exists in the way that the wlansvc.dll handles objects in memory, aka 'Windows WLAN Service Elevatio