CVE's - CVE Vulnerability

CVE

Vendors

Products

Updated

CVSS v2

CVSS v3

CVE-2020-7721

2022-12-02

N/A

9.8 CRITICAL

All versions of package node-oojs are vulnerable to Prototype Pollution via the setPath function.

CVE-2020-7720

2022-12-02

N/A

7.3 HIGH

The package node-forge before 0.10.0 is vulnerable to Prototype Pollution via the util.setPath function. Note: Version 0.10.0 is a breaking change removing the vulnerable functions.

CVE-2020-7719

2022-12-02

N/A

9.8 CRITICAL

Versions of package locutus before 2.0.12 are vulnerable to prototype Pollution via the php.strings.parse_str function.

CVE-2020-7718

2022-12-02

N/A

9.8 CRITICAL

All versions of package gammautils are vulnerable to Prototype Pollution via the deepSet and deepMerge functions.

CVE-2020-7717

2022-12-02

N/A

9.8 CRITICAL

All versions of package dot-notes are vulnerable to Prototype Pollution via the create function.

CVE-2020-7716

2022-12-02

N/A

9.8 CRITICAL

All versions of package deeps are vulnerable to Prototype Pollution via the set function.

CVE-2020-7715

2022-12-02

N/A

9.8 CRITICAL

All versions of package deep-get-set are vulnerable to Prototype Pollution via the main function.

CVE-2020-7714

2022-12-02

N/A

9.8 CRITICAL

All versions of package confucious are vulnerable to Prototype Pollution via the set function.

CVE-2020-7713

2022-12-02

N/A

9.8 CRITICAL

All versions of package arr-flatten-unflatten are vulnerable to Prototype Pollution via the constructor.

CVE-2020-7712

2022-12-03

N/A

7.2 HIGH

This affects the package json before 10.0.0. It is possible to inject arbritary commands using the parseLookup function.

« Previous 1 … 3,240 3,241 3,242 3,243 3,244 … 11,258 Next »