Search

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (443 CVEs found)

Export CSV
CVE Vendors Products Updated CVSS v3.1
CVE-2020-7743 2 Mathjs, Redhat 2 Mathjs, Ansible Tower 2024-11-21 7.3 High
The package mathjs before 7.5.1 are vulnerable to Prototype Pollution via the deepExtend function that runs upon configuration updates.
CVE-2020-7737 1 Safetydance Project 1 Safetydance 2024-11-21 7.3 High
All versions of package safetydance are vulnerable to Prototype Pollution via the set function.
CVE-2020-7736 1 Bmoor Project 1 Bmoor 2024-11-21 7.3 High
The package bmoor before 0.8.12 are vulnerable to Prototype Pollution via the set function.
CVE-2020-7727 1 Gedi Project 1 Gedi 2024-11-21 9.8 Critical
All versions of package gedi are vulnerable to Prototype Pollution via the set function.
CVE-2020-7726 1 Safe-object2 Project 1 Safe-object2 2024-11-21 9.8 Critical
All versions of package safe-object2 are vulnerable to Prototype Pollution via the setter function.
CVE-2020-7725 1 Guidesmiths 1 Worksmith 2024-11-21 9.8 Critical
All versions of package worksmith are vulnerable to Prototype Pollution via the setValue function.
CVE-2020-7724 1 Tiny-conf Project 1 Tiny-conf 2024-11-21 9.8 Critical
All versions of package tiny-conf are vulnerable to Prototype Pollution via the set function.
CVE-2020-7723 1 Yola 1 Promisehelpers 2024-11-21 9.8 Critical
All versions of package promisehelpers are vulnerable to Prototype Pollution via the insert function.
CVE-2020-7722 1 Nodee-utils Project 1 Nodee-utils 2024-11-21 9.8 Critical
All versions of package nodee-utils are vulnerable to Prototype Pollution via the deepSet function.
CVE-2020-7721 1 Node-oojs Project 1 Node-oojs 2024-11-21 9.8 Critical
All versions of package node-oojs are vulnerable to Prototype Pollution via the setPath function.
CVE-2020-7720 2 Digitalbazaar, Redhat 3 Forge, Ansible Tower, Openshift Container Storage 2024-11-21 9.8 Critical
The package node-forge before 0.10.0 is vulnerable to Prototype Pollution via the util.setPath function. Note: Version 0.10.0 is a breaking change removing the vulnerable functions.
CVE-2020-7719 1 Locutus 1 Locutus 2024-11-21 9.8 Critical
Versions of package locutus before 2.0.12 are vulnerable to prototype Pollution via the php.strings.parse_str function.
CVE-2020-7718 1 Gammautils Project 1 Gammautils 2024-11-21 9.8 Critical
All versions of package gammautils are vulnerable to Prototype Pollution via the deepSet and deepMerge functions.
CVE-2020-7717 1 Dot-notes Project 1 Dot-notes 2024-11-21 9.8 Critical
All versions of package dot-notes are vulnerable to Prototype Pollution via the create function.
CVE-2020-7716 1 Invertase 1 Deeps 2024-11-21 9.8 Critical
All versions of package deeps are vulnerable to Prototype Pollution via the set function.
CVE-2020-7715 1 Deep-get-set Project 1 Deep-get-set 2024-11-21 9.8 Critical
All versions of package deep-get-set are vulnerable to Prototype Pollution via the main function.
CVE-2020-7714 1 Realseriousgames 1 Confucious 2024-11-21 9.8 Critical
All versions of package confucious are vulnerable to Prototype Pollution via the set function.
CVE-2020-7713 1 Arr-flatten-unflatten Project 1 Arr-flatten-unflatten 2024-11-21 9.8 Critical
All versions of package arr-flatten-unflatten are vulnerable to Prototype Pollution via the constructor.
CVE-2020-7708 1 Irrelon 2 \@irrelon\/path, Irrelon-path 2024-11-21 9.8 Critical
The package irrelon-path before 4.7.0; the package @irrelon/path before 4.7.0 are vulnerable to Prototype Pollution via the set, unSet, pushVal and pullVal functions.
CVE-2020-7707 1 Property-expr Project 1 Property-expr 2024-11-21 9.8 Critical
The package property-expr before 2.0.3 are vulnerable to Prototype Pollution via the setter function.