CVE's - CVE Vulnerability

CVE

Vendors

Products

Updated

CVSS v2

CVSS v3

CVE-2022-37259

2022-09-22

N/A

7.5 HIGH

A Regular Expression Denial of Service (ReDoS) flaw was found in stealjs steal 2.2.4 via the string variable in babel.js.

CVE-2022-37258

2022-09-21

N/A

9.8 CRITICAL

Prototype pollution vulnerability in function convertLater in npm-convert.js in stealjs steal 2.2.4 via the packageName variable in npm-convert.js.

CVE-2022-37257

2022-09-19

N/A

9.8 CRITICAL

Prototype pollution vulnerability in function convertLater in npm-convert.js in stealjs steal 2.2.4 via the requestedVersion variable in npm-convert.js.

CVE-2022-37254

2022-08-22

N/A

5.4 MEDIUM

DolphinPHP 1.5.1 is vulnerable to Cross Site Scripting (XSS) via Background - > System - > system function - > configuration management.

CVE-2022-37253

2022-09-09

N/A

5.4 MEDIUM

Persistent cross-site scripting (XSS) in Crime Reporting System 1.0 allows a remote attacker to introduce arbitary Javascript via manipulation of an unsanitized POST parameter

CVE-2022-37251

2022-09-21

N/A

5.4 MEDIUM

Craft CMS 4.2.0.1 is vulnerable to Cross Site Scripting (XSS) via Drafts.

CVE-2022-37250

2022-09-17

N/A

5.4 MEDIUM

Craft CMS 4.2.0.1 suffers from Stored Cross Site Scripting (XSS) in /admin/myaccount.

CVE-2022-3725

2023-02-03