CWE-1321
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
The product receives input from an upstream component that specifies attributes that are to be initialized or updated in an object, but it does not properly control modifications of attributes of the object prototype.
540 vulnerabilities with CWE-1321
CVE-2020-28462
HIGH
ion-parser - Prototype Pollution via INI File Parsing
CVSS 7.3
CVE-2020-28461
HIGH
js-ini < 1.3.0 - Prototype Pollution via Malicious INI File Parsing
CVSS 7.3
CVE-2020-28441
HIGH
conf-cfg-ini < 1.2.2 - Prototype Pollution via Malicious INI File Parsing
CVSS 7.3
CVE-2020-7641
MEDIUM
grunt-util-property - Prototype Pollution via __proto__ Payload
CVSS 4.0
CVE-2020-24939
HIGH
Stampit supermixer < 1.0.5 - Prototype Pollution
CVSS 7.5
CVE-2020-7771
HIGH
asciitable.js <1.0.3 - Info Disclosure
CVSS 7.5
CVE-2020-28460
MEDIUM
multi-ini < 2.1.2 - Prototype Pollution via Constructor Proto Array Bypass
CVSS 5.6
CVE-2020-28448
MEDIUM
multi-ini < 2.1.1 - Prototype Pollution via Array Input
CVSS 5.6
CVE-2020-28458
HIGH
datatables.net < 1.10.23 - Prototype Pollution
CVSS 7.3
CVE-2020-7792
HIGH
mout < 1.2.3 - Prototype Pollution via deepFillIn and deepMixIn Functions
CVSS 7.5
CVE-2020-7788
HIGH
ini < 1.3.6 - Prototype Pollution via Malicious INI File Parsing
CVSS 7.3
CVE-2020-7774
HIGH
y18n <3.2.2, 4.0.1, 5.0.5 - Prototype Pollution
CVSS 7.3
CVE-2020-28268
HIGH
controlled-merge 1.0.0-1.2.0 - Prototype Pollution
CVSS 7.5
CVE-2020-28271
CRITICAL
deephas 1.0.0-1.0.5 - Prototype Pollution leading to Denial of Service and Remote Code Execution
CVSS 9.8
CVE-2020-28270
CRITICAL
object-hierarchy-access 0.2.0-0.32.0 - Prototype Pollution
CVSS 9.8
CVE-2020-28269
CRITICAL
field 0.0.1-1.0.1 - Prototype Pollution leading to Denial of Service and Remote Code Execution
CVSS 9.8
CVE-2020-7770
MEDIUM
json8 < 1.0.3 - Prototype Pollution
CVSS 6.5
CVE-2020-7768
HIGH
grpc < 1.24.4 and @grpc/grpc-js < 1.1.8 - Prototype Pollution via loadPackageDefinition
CVSS 7.5
CVE-2020-7766
HIGH
json-ptr < 2.0.0 - Prototype Pollution via Force Flag in Set Operation
CVSS 7.3
CVE-2020-7746
HIGH
chart.js < 2.9.4 - Prototype Pollution via Options Parameter
CVSS 7.5
CVE-2020-7751
MEDIUM
pathval < 1.1.1 - Prototype Pollution
CVSS 6.0
CVE-2020-7748
MEDIUM
Ts.ed < 5.65.7 - Prototype Pollution
CVSS 5.6
CVE-2020-7743
HIGH
mathjs < 7.5.1 - Prototype Pollution via deepExtend Function
CVSS 7.3
CVE-2020-7709
MEDIUM
json-pointer < 0.6.1 - Prototype Pollution via Slash Reference Handling
CVSS 6.0
CVE-2020-7737
HIGH
safetydance - Prototype Pollution via set Function
CVSS 7.3
Details
Vulnerabilities
540