CWE-1321
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
The product receives input from an upstream component that specifies attributes that are to be initialized or updated in an object, but it does not properly control modifications of attributes of the object prototype.
473 vulnerabilities with CWE-1321
CVE-2022-46175
HIGH
JSON5 <2.2.1 - Prototype Pollution
CVSS 7.1
CVE-2022-2200
HIGH
Mozilla Firefox < 102.0 - Prototype Pollution
CVSS 8.8
CVE-2022-1802
HIGH
Mozilla Firefox < 100.0.2 - Prototype Pollution
CVSS 8.8
CVE-2022-1529
HIGH
Mozilla Firefox < 100.0.2 - Prototype Pollution
CVSS 8.8
CVE-2022-25904
HIGH
Safe-eval < 0.4.1 - Prototype Pollution
CVSS 7.5
CVE-2022-24999
HIGH
QS < 6.2.4 - Prototype Pollution
CVSS 7.5
CVE-2022-41878
HIGH
Parse Server <5.3.2, <4.10.19 - Auth Bypass
CVSS 7.2
CVE-2022-41879
HIGH
Parse Server <5.3.3,4.10.20 - Prototype Pollution
CVSS 7.2
CVE-2022-39396
CRITICAL
Parseplatform Parse-server < 4.10.18 - Prototype Pollution
CVSS 9.8
CVE-2022-42743
MEDIUM
Deep-parse-json - Prototype Pollution
CVSS 5.3
CVE-2022-41714
MEDIUM
fastest-json-copy <1.0.1 - Code Injection
CVSS 5.3
CVE-2022-41713
MEDIUM
deep-object-diff <1.1.0 - Code Injection
CVSS 5.3
CVE-2022-37623
CRITICAL
Browserify-shim < 3.8.16 - Prototype Pollution
CVSS 9.8
CVE-2022-37621
CRITICAL
Browserify-shim < 3.8.16 - Prototype Pollution
CVSS 9.8
CVE-2022-39357
HIGH
Winter < 1.1.10 - Prototype Pollution
CVSS 8.1
CVE-2022-29823
CRITICAL
Feathersjs Feathers-sequelize < 6.3.4 - Prototype Pollution
CVSS 10.0
CVE-2022-37598
CRITICAL
Uglifyjs - Prototype Pollution
CVSS 9.8
CVE-2022-37602
CRITICAL
Grunt-karma - Prototype Pollution
CVSS 9.8
CVE-2022-37601
CRITICAL
Webpack.js Loader-utils < 1.4.1 - Prototype Pollution
CVSS 9.8
CVE-2022-37614
CRITICAL
Mockery - Prototype Pollution
CVSS 9.8
CVE-2022-37611
CRITICAL
Gh-pages < 5.0.0 - Prototype Pollution
CVSS 9.8
CVE-2022-37617
CRITICAL
Browserify-shim < 3.8.16 - Prototype Pollution
CVSS 9.8
CVE-2022-37609
CRITICAL
Js-beautify - Prototype Pollution
CVSS 9.8
CVE-2022-37616
CRITICAL
Xmldom < 0.6.0 - Prototype Pollution
CVSS 9.8
CVE-2022-21169
HIGH
Express Xss Sanitizer < 1.1.3 - Prototype Pollution
CVSS 7.3
Details
Vulnerabilities
473