Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (393 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2020-7718 1 Gammautils Project 1 Gammautils 2024-11-21 9.8 Critical
All versions of package gammautils are vulnerable to Prototype Pollution via the deepSet and deepMerge functions.
CVE-2020-7717 1 Dot-notes Project 1 Dot-notes 2024-11-21 9.8 Critical
All versions of package dot-notes are vulnerable to Prototype Pollution via the create function.
CVE-2020-7716 1 Invertase 1 Deeps 2024-11-21 9.8 Critical
All versions of package deeps are vulnerable to Prototype Pollution via the set function.
CVE-2020-7715 1 Deep-get-set Project 1 Deep-get-set 2024-11-21 9.8 Critical
All versions of package deep-get-set are vulnerable to Prototype Pollution via the main function.
CVE-2020-7714 1 Realseriousgames 1 Confucious 2024-11-21 9.8 Critical
All versions of package confucious are vulnerable to Prototype Pollution via the set function.
CVE-2020-7713 1 Arr-flatten-unflatten Project 1 Arr-flatten-unflatten 2024-11-21 9.8 Critical
All versions of package arr-flatten-unflatten are vulnerable to Prototype Pollution via the constructor.
CVE-2020-7708 1 Irrelon 2 \@irrelon\/path, Irrelon-path 2024-11-21 9.8 Critical
The package irrelon-path before 4.7.0; the package @irrelon/path before 4.7.0 are vulnerable to Prototype Pollution via the set, unSet, pushVal and pullVal functions.
CVE-2020-7707 1 Property-expr Project 1 Property-expr 2024-11-21 9.8 Critical
The package property-expr before 2.0.3 are vulnerable to Prototype Pollution via the setter function.
CVE-2020-7706 1 Connie-lang Project 1 Connie-lang 2024-11-21 9.8 Critical
The package connie-lang before 0.1.1 are vulnerable to Prototype Pollution in the configuration language library used by connie.
CVE-2020-7704 1 Linux-cmdline Project 1 Linux-cmdline 2024-11-21 9.8 Critical
The package linux-cmdline before 1.0.1 are vulnerable to Prototype Pollution via the constructor.
CVE-2020-7703 1 Nis-utils Project 1 Nis-utils 2024-11-21 9.8 Critical
All versions of package nis-utils are vulnerable to Prototype Pollution via the setValue function.
CVE-2020-7702 1 Templ8 Project 1 Templ8 2024-11-21 9.8 Critical
All versions of package templ8 are vulnerable to Prototype Pollution via the parse function.
CVE-2020-7701 1 Springtree 1 Madlib-object-utils 2024-11-21 9.8 Critical
madlib-object-utils before 0.1.7 is vulnerable to Prototype Pollution via setValue.
CVE-2020-7700 1 Php.js Project 1 Php.js 2024-11-21 9.8 Critical
All versions of phpjs are vulnerable to Prototype Pollution via parse_str.
CVE-2020-7699 2 Express-fileupload Project, Netapp 2 Express-fileupload, Max Data 2024-11-21 7.5 High
This affects the package express-fileupload before 1.1.8. If the parseNested option is enabled, sending a corrupt HTTP request can lead to denial of service or arbitrary code execution.
CVE-2020-7679 1 Casperjs 1 Casperjs 2024-11-21 7.3 High
In all versions of package casperjs, the mergeObjects utility function is susceptible to Prototype Pollution.
CVE-2020-7644 1 Fun-map Project 1 Fun-map 2024-11-21 8.1 High
fun-map through 3.3.1 is vulnerable to Prototype Pollution. The function assocInM could be tricked into adding or modifying properties of 'Object.prototype' using a '__proto__' payload.
CVE-2020-7643 1 Idea 1 Paypal-adaptive 2024-11-21 5.3 Medium
paypal-adaptive through 0.4.2 manipulation of JavaScript objects resulting in Prototype Pollution. The PayPal function could be tricked into adding or modifying properties of Object.prototype using a __proto__ payload.
CVE-2020-7641 1 Grunt-util-property Project 1 Grunt-util-property 2024-11-21 4 Medium
This affects all versions of package grunt-util-property. The function call could be tricked into adding or modifying properties of Object.prototype using a __proto__ payload.
CVE-2020-7639 1 Dot Project 1 Dot 2024-11-21 5.3 Medium
eivindfjeldstad-dot below 1.0.3 is vulnerable to Prototype Pollution.The function 'set' could be tricked into adding or modifying properties of 'Object.prototype' using a '__proto__' payload.