stealjs kayıtları
stealjs üreticisine ait 8 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-1321 Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')5
- CWE-1333 Inefficient Regular Expression Complexity3
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
8 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2022-37265İstismar yok | Prototype pollution vulnerability in stealjs steal 2.2.4 via the alias variable in babel.js.stealjs · steal · CWE-1321 | Kritik9,8 | — | %1,6 | 20 Eyl 2022 |
39İzleyin | CVE-2022-37258İstismar yok | Prototype pollution vulnerability in function convertLater in npm-convert.js in stealjs steal 2.2.4 via the packageName variable in npm-convstealjs · steal · CWE-1321 | Kritik9,8 | — | %1,5 | 16 Eyl 2022 |
39İzleyin | CVE-2022-37264İstismar yok | Prototype pollution vulnerability in stealjs steal 2.2.4 via the optionName variable in main.js.stealjs · steal · CWE-1321 | Kritik9,8 | — | %1,5 | 15 Eyl 2022 |
39İzleyin | CVE-2022-37257İstismar yok | Prototype pollution vulnerability in function convertLater in npm-convert.js in stealjs steal 2.2.4 via the requestedVersion variable in npmstealjs · steal · CWE-1321 | Kritik9,8 | — | %1,3 | 15 Eyl 2022 |
39İzleyin | CVE-2022-37266İstismar yok | Prototype pollution vulnerability in function extend in babel.js in stealjs steal 2.2.4 via the key variable in babel.js.stealjs · steal · CWE-1321 | Kritik9,8 | — | %1,3 | 15 Eyl 2022 |
30İzleyin | CVE-2022-37262İstismar yok | A Regular Expression Denial of Service (ReDoS) flaw was found in stealjs steal 2.2.4 via the source and sourceWithComments variable in main.stealjs · steal · CWE-1333 | Yüksek7,5 | — | %1,3 | 15 Eyl 2022 |
30İzleyin | CVE-2022-37259İstismar yok | A Regular Expression Denial of Service (ReDoS) flaw was found in stealjs steal 2.2.4 via the string variable in babel.js.stealjs · steal · CWE-1333 | Yüksek7,5 | — | %1,3 | 20 Eyl 2022 |
30İzleyin | CVE-2022-37260İstismar yok | A Regular Expression Denial of Service (ReDoS) flaw was found in stealjs steal 2.2.4 via the input variable in main.js.stealjs · steal · CWE-1333 | Yüksek7,5 | — | %1,3 | 15 Eyl 2022 |
- CVE-2022-3726539İzleyin
Prototype pollution vulnerability in stealjs steal 2.2.4 via the alias variable in babel.js.
KritikCVSS 9,8İstismar yokEPSS %1stealjs · steal20 Eyl 2022
- CVE-2022-3725839İzleyin
Prototype pollution vulnerability in function convertLater in npm-convert.js in stealjs steal 2.2.4 via the packageName variable in npm-conv
KritikCVSS 9,8İstismar yokEPSS %1stealjs · steal16 Eyl 2022
- CVE-2022-3726439İzleyin
Prototype pollution vulnerability in stealjs steal 2.2.4 via the optionName variable in main.js.
KritikCVSS 9,8İstismar yokEPSS %1stealjs · steal15 Eyl 2022
- CVE-2022-3725739İzleyin
Prototype pollution vulnerability in function convertLater in npm-convert.js in stealjs steal 2.2.4 via the requestedVersion variable in npm
KritikCVSS 9,8İstismar yokEPSS %1stealjs · steal15 Eyl 2022
- CVE-2022-3726639İzleyin
Prototype pollution vulnerability in function extend in babel.js in stealjs steal 2.2.4 via the key variable in babel.js.
KritikCVSS 9,8İstismar yokEPSS %1stealjs · steal15 Eyl 2022
- CVE-2022-3726230İzleyin
A Regular Expression Denial of Service (ReDoS) flaw was found in stealjs steal 2.2.4 via the source and sourceWithComments variable in main.
YüksekCVSS 7,5İstismar yokEPSS %1stealjs · steal15 Eyl 2022
- CVE-2022-3725930İzleyin
A Regular Expression Denial of Service (ReDoS) flaw was found in stealjs steal 2.2.4 via the string variable in babel.js.
YüksekCVSS 7,5İstismar yokEPSS %1stealjs · steal20 Eyl 2022
- CVE-2022-3726030İzleyin
A Regular Expression Denial of Service (ReDoS) flaw was found in stealjs steal 2.2.4 via the input variable in main.js.
YüksekCVSS 7,5İstismar yokEPSS %1stealjs · steal15 Eyl 2022