CWE-1321
Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')
The product receives input from an upstream component that specifies attributes that are to be initialized or updated in an object, but it does not properly control modifications of attributes of the object prototype.
540 vulnerabilities with CWE-1321
CVE-2024-21528
MEDIUM
node-gettext - Prototype Pollution via addTranslations() Function
CVSS 5.9
CVE-2024-45435
CRITICAL
Chartist 1.0.0-1.3.0 - Prototype Pollution via Extend Function
CVSS 9.8
CVE-2024-37287
CRITICAL
Kibana 7.7.0-7.17.23 - Authenticated Remote Code Execution via Prototype Pollution in ML and Alerting Connector Features
CVSS 9.1
CVE-2024-38989
CRITICAL
bunt < 0.29.26 - Prototype Pollution via qs.js Component
CVSS 9.8
CVE-2024-38983
CRITICAL
alykoshin mini-deep-assign 0.0.8 - Prototype Pollution via _assign() Method
CVSS 9.8
CVE-2024-39012
CRITICAL
ais strategyen 0.4.0 - Prototype Pollution via mergeObjects Function
CVSS 9.8
CVE-2024-39011
CRITICAL
chargeover redoc v2.0.9-rc.69 - Prototype Pollution via mergeObjects Function
CVSS 9.8
CVE-2024-39010
CRITICAL
chasemoskal snapstate 0.0.9 - Prototype Pollution via attemptNestedProperty Function
CVSS 9.8
CVE-2024-38986
CRITICAL
75lb deep-merge < 1.1.2 - Prototype Pollution via Lodash Merge Methods
CVSS 9.8
CVE-2024-38984
CRITICAL
lukebond json-override 0.2.0 - Prototype Pollution via __proto__ Property
CVSS 9.8
CVE-2024-36572
CRITICAL
allpro form-manager 0.7.4 - Prototype Pollution via setDefaults, mergeBranch, and Object.setObjectValue
CVSS 9.8
CVE-2024-33519
HIGH
HPE Aruba Networking EdgeConnect - RCE
CVSS 7.2
CVE-2024-22443
HIGH
EdgeConnect SD-WAN Orchestrator - Command Injection
CVSS 7.2
CVE-2024-39853
MEDIUM
swiper - Prototype Pollution via Parse Function
CVSS 6.5
CVE-2024-39018
MEDIUM
cat5th key-serializer 0.2.5 - Prototype Pollution via Query Function
CVSS 6.3
CVE-2024-39016
HIGH
che3vinci c3/utils-1 - Prototype Pollution
CVSS 8.1
CVE-2024-39014
CRITICAL
cahil/utils <2.3.2 - Code Injection
CVSS 9.8
CVE-2024-39013
CRITICAL
2o3t-utility <0.1.2 - Code Injection
CVSS 9.8
CVE-2024-39008
CRITICAL
fast-loops < 1.1.4 - Prototype Pollution via objectMergeDeep Function
CVSS 10.0
CVE-2024-39003
HIGH
amoyjs common v1.0.10 - Prototype Pollution via setValue Function
CVSS 7.3
CVE-2024-39001
MEDIUM
ag-grid < 31.3.4 - Prototype Pollution via _ModuleSupport.jsonApply
CVSS 6.3
CVE-2024-39000
MEDIUM
swiper - Prototype Pollution via Parse Function
CVSS 6.5
CVE-2024-38999
CRITICAL
requirejs < 2.3.7 - Prototype Pollution via s.contexts._.configure Function
CVSS 10.0
CVE-2024-38997
MEDIUM
ratio-swiper 0.0.2 - Prototype Pollution via extendDefaults Function
CVSS 6.5
CVE-2024-38996
CRITICAL
ag-grid < 31.3.4 - Prototype Pollution via _.mergeDeep Function
CVSS 9.8
Details
Vulnerabilities
540