Records22All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high12CVSS 7.0–8.9
Exploited now
Verizon records in CISA KEVNo Verizon vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 41
serialize-javascript prior to 3.1.0 allows remote attackers to inject arbitrary code via the function "deleteFunctions" within "index.js".
CVSS 3.1HIGH 8.1· Network · No auth · No interaction · EPSS 0.03009 · Published 2020-06-01 · Partial fix · 3.1.0 CWE-502
Priority LOW 26
The serialize-javascript npm package before version 2.1.1 is vulnerable to Cross-site Scripting (XSS).
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.008 · Published 2019-12-05 · Partial fix · 2.1.1 CWE-79
Open these records in search →