Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 654

Export CSV
CVE-2020-7743

Prototype Pollution

The package mathjs before 7.5.1 are vulnerable to Prototype Pollution via the deepExtend function that runs upon configuration updates.

CVSS 3.1 · 7.3 High EPSS 3.9% KEV · Not listed
Vendors
Mathjs Redhat
Products
Mathjs Ansible Tower
CVE-2020-7736

Prototype Pollution

The package bmoor before 0.8.12 are vulnerable to Prototype Pollution via the set function.

CVSS 3.1 · 7.3 High EPSS 1.5% KEV · Not listed
Vendors
Bmoor Project
Products
Bmoor
CVE-2020-7727

Prototype Pollution

All versions of package gedi are vulnerable to Prototype Pollution via the set function.

CVSS 3.1 · 9.8 Critical EPSS 1.9% KEV · Not listed
Vendors
Gedi Project
Products
Gedi
CVE-2020-7725

Prototype Pollution

All versions of package worksmith are vulnerable to Prototype Pollution via the setValue function.

CVSS 3.1 · 9.8 Critical EPSS 1.9% KEV · Not listed
Vendors
Guidesmiths
Products
Worksmith
CVE-2020-7724

Prototype Pollution

All versions of package tiny-conf are vulnerable to Prototype Pollution via the set function.

CVSS 3.1 · 9.8 Critical EPSS 1.9% KEV · Not listed
Vendors
Tiny-conf Project
Products
Tiny-conf
CVE-2020-7723

Prototype Pollution

All versions of package promisehelpers are vulnerable to Prototype Pollution via the insert function.

CVSS 3.1 · 9.8 Critical EPSS 1.9% KEV · Not listed
Vendors
Yola
Products
Promisehelpers
CVE-2020-7722

Prototype Pollution

All versions of package nodee-utils are vulnerable to Prototype Pollution via the deepSet function.

CVSS 3.1 · 9.8 Critical EPSS 1.9% KEV · Not listed
Vendors
Nodee-utils Project
Products
Nodee-utils
CVE-2020-7721

Prototype Pollution

All versions of package node-oojs are vulnerable to Prototype Pollution via the setPath function.

CVSS 3.1 · 9.8 Critical EPSS 1.9% KEV · Not listed
Vendors
Node-oojs Project
Products
Node-oojs
CVE-2020-7719

Prototype Pollution

Versions of package locutus before 2.0.12 are vulnerable to prototype Pollution via the php.strings.parse_str function.

CVSS 3.1 · 9.8 Critical EPSS 2.8% KEV · Not listed
Vendors
Locutus
Products
Locutus
CVE-2020-7718

Prototype Pollution

All versions of package gammautils are vulnerable to Prototype Pollution via the deepSet and deepMerge functions.

CVSS 3.1 · 9.8 Critical EPSS 1.9% KEV · Not listed
Vendors
Gammautils Project
Products
Gammautils
CVE-2020-7717

Prototype Pollution

All versions of package dot-notes are vulnerable to Prototype Pollution via the create function.

CVSS 3.1 · 9.8 Critical EPSS 1.9% KEV · Not listed
Vendors
Dot-notes Project
Products
Dot-notes
CVE-2020-7716

Prototype Pollution

All versions of package deeps are vulnerable to Prototype Pollution via the set function.

CVSS 3.1 · 9.8 Critical EPSS 1.9% KEV · Not listed
Vendors
Invertase
Products
Deeps
CVE-2020-7714

Prototype Pollution

All versions of package confucious are vulnerable to Prototype Pollution via the set function.

CVSS 3.1 · 9.8 Critical EPSS 1.9% KEV · Not listed
Vendors
Realseriousgames
Products
Confucious
CVE-2020-7708

Prototype Pollution

The package irrelon-path before 4.7.0; the package @irrelon/path before 4.7.0 are vulnerable to Prototype Pollution via the set, unSet, pushVal and pullVal functions.

CVSS 3.1 · 9.8 Critical EPSS 2.8% KEV · Not listed
Vendors
Irrelon
Products
\@irrelon\/path Irrelon-path