2 matches found
Improperly Controlled Modification of Dynamically-Determined Object Attributes
Overview @nyariv/sandboxjs is a Javascript sandboxing library. Affected versions of this package are vulnerable to Improperly Controlled Modification of Dynamically-Determined Object Attributes through the constructor process. An attacker can modify host global objects and persist these changes...
10CVSS6.3AI score0.00561EPSS
SaveExploits1References3
CVE-2022-41259
SAP SQL Anywhere - version 17.0, allows an authenticated attacker to prevent legitimate users from accessing a SQL Anywhere database server by crashing the server with some queries that use an ARRAY constructor...
6.5CVSS0.00716EPSS
SaveExploits0References2
20