CVEs published June 7, 2018
237 CVEs were published on June 7, 2018: 0 critical, 8 high. 1 is now in CISA KEV.
- Published
- 237
- Critical
- 0
- High
- 8
- Medium
- 1
- Low
- 0
- Unrated
- 228
- Now in CISA KEV
- 1
- Fix available
- 47
Most affected products
- Cisco Prime Collaboration Provisioning unknown
- 8
- Nvidia GPU Display Driver
- 3
- Cisco Unified Communications Manager unknown
- 2
- Cisco WebEx unknown
- 2
- Cisco Wide Area Application Services unknown
- 2
- HackerOne serve node module · serve
- 2
- IBM Robotic Process Automation with Automation Anywhere
- 2
- openSUSE Open Build Service
- 2
- botbait
- 1
- Cisco Adaptive Security Appliance unknown
- 1
High 8
- CVE-2011-0467SQL injection in SUSE studio via select parameterSUSE Studio Onsite
- CVE-2018-6670External Entity Attack vulnerability in McAfee Common UI (CUI)McAfee Common UI
- CVE-2018-1547IBM Robotic Process Automation with Automation Anywhere 10.0 could allow a remote attacker to execute arbitrary code on the system, caused bIBM Robotic Process Automation with Automation Anywhere
- CVE-2018-7688Open Build Service accepts arbitrary reviewsopenSUSE Open Build Service
- CVE-2018-7689Open Build Service arbitrary package modificationopenSUSE Open Build Service
- CVE-2018-0296A vulnerability in the web interface of the Cisco Adaptive Security Appliance (ASA) could allow an unauthenticated, remote attacker to causeCisco Adaptive Security Appliance unknown
- CVE-2017-16119Fresh is a module used by the Express.js framework for HTTP response freshness testing.HackerOne fresh node module · fresh
- CVE-2017-16138The mime module < 1.4.1, 2.0.1, 2.0.2 is vulnerable to regular expression denial of service when a mime lookup is performed on untrusted useHackerOne mime node module · mime
Medium, low and unrated 229
- CVE-2018-0149A vulnerability in the web-based management interface of Cisco Integrated Management Controller Supervisor Software and Cisco UCS Director SCisco Integrated Management Controller Supervisor and Cisco…
- CVE-2018-0329A vulnerability in the default configuration of the Simple Network Management Protocol (SNMP) feature of Cisco Wide Area Application ServiceCisco Wide Area Application Services unknown
- CVE-2018-0332A vulnerability in the Session Initiation Protocol (SIP) ingress packet processing of Cisco Unified IP Phone software could allow an unautheCisco Unified IP Phone Software unknown
- CVE-2018-0333A vulnerability in the VPN configuration management of Cisco FireSIGHT System Software could allow an unauthenticated, remote attacker to byCisco FireSIGHT unknown
- CVE-2018-0334A vulnerability in the certificate management subsystem of Cisco AnyConnect Network Access Manager and of Cisco AnyConnect Secure Mobility CCisco AnyConnect Secure Mobility Client unknown
- CVE-2018-0335A vulnerability in the web portal authentication process of Cisco Prime Collaboration Provisioning could allow an unauthenticated, local attCisco Prime Collaboration Provisioning unknown
- CVE-2018-0336A vulnerability in the batch provisioning feature of Cisco Prime Collaboration Provisioning could allow an authenticated, remote attacker toCisco Prime Collaboration Provisioning unknown
- CVE-2018-0338A vulnerability in the role-based access-checking mechanisms of Cisco Unified Computing System (UCS) Software could allow an authenticated, Cisco Unified Computing System unknown
- CVE-2018-0339A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attackeCisco Identity Services Engine unknown
- CVE-2018-0340A vulnerability in the web framework of the Cisco Unified Communications Manager (Unified CM) software could allow an authenticated, remote Cisco Unified Communications Manager unknown
- CVE-2018-0352A vulnerability in the Disk Check Tool (disk-check.sh) for Cisco Wide Area Application Services (WAAS) Software could allow an authenticatedCisco Wide Area Application Services unknown
- CVE-2018-0354A vulnerability in the web framework of Cisco Unity Connection could allow an unauthenticated, remote attacker to conduct a cross-site scripCisco Unity Connection unknown
- CVE-2018-0355A vulnerability in the web UI of Cisco Unified Communications Manager (Unified CM) could allow an unauthenticated, remote attacker to conducCisco Unified Communications Manager unknown
- CVE-2018-0356A vulnerability in the web framework of Cisco WebEx could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) Cisco WebEx unknown
- CVE-2018-0357A vulnerability in the web framework of Cisco WebEx could allow an unauthenticated, remote attacker to conduct a cross-site scripting (XSS) Cisco WebEx unknown
- CVE-2018-3758Unrestricted file upload (RCE) in express-cart module before 1.1.7 allows a privileged user to gain access in the hosting machine.HackerOne express-cart · express-cart
- CVE-2018-10619An unquoted search path or element in RSLinx Classic Versions 3.90.01 and prior and FactoryTalk Linx Gateway Versions 3.90.00 and prior may ICS-CERT Rockwell Automation RSLinx Classic and FactoryTalk…
- CVE-2018-12042Roxy Fileman through v1.4.5 has Directory traversal via the php/download.php f parameter.
- CVE-2018-12043content/content.blueprintspages.php in Symphony 2.7.6 has XSS via the pages content page.
- CVE-2017-6290In Android before the 2018-06-05 security patch level, NVIDIA TLK TrustZone contains a possible out of bounds write due to an integer overflNvidia GPU Display Driver
- CVE-2017-6292In Android before the 2018-06-05 security patch level, NVIDIA TLZ TrustZone contains a possible out of bounds write due to integer overflow Nvidia GPU Display Driver
- CVE-2017-6294In Android before the 2018-06-05 security patch level, NVIDIA Tegra X1 TZ contains a possible out of bounds write due to missing bounds checNvidia GPU Display Driver
- CVE-2018-12039joyplus-cms 1.6.0 allows Remote Code Execution because of an Arbitrary SQL command execution issue in manager/index.php involving use of a "
- CVE-2018-12036OWASP Dependency-Check before 3.2.0 allows attackers to write to arbitrary files via a crafted archive that holds directory traversal filenaorg.owasp:dependency-check-maven
- CVE-2018-12031Local file inclusion in Eaton Intelligent Power Manager v1.6 allows an attacker to include a file via server/node_upgrade_srv.js directory t
- CVE-2018-12016libephymain.so in GNOME Web (aka Epiphany) through 3.28.2.1 allows remote attackers to cause a denial of service (application crash) via cer
- CVE-2018-1514IBM Robotic Process Automation with Automation Anywhere 10.0 is vulnerable to cross-site request forgery which could allow an attacker to exIBM Robotic Process Automation with Automation Anywhere
- CVE-2018-12015In Perl through 5.26.2, the Archive::Tar module allows remote attackers to bypass a directory-traversal protection mechanism, and overwrite
- CVE-2017-6779Multiple Cisco products are affected by a vulnerability in local file management for certain system log files of Cisco collaboration productMultiple Cisco Products unknown
- CVE-2018-0263A vulnerability in Cisco Meeting Server (CMS) could allow an unauthenticated, adjacent attacker to access services running on internal devicCisco Meeting Server unknown
- CVE-2018-0274A vulnerability in the CLI parser of Cisco Network Services Orchestrator (NSO) could allow an authenticated, remote attacker to execute arbiCisco Network Services Orchestrator unknown
- CVE-2018-0315A vulnerability in the authentication, authorization, and accounting (AAA) security services of Cisco IOS XE Software could allow an unautheCisco IOS XE unknown
- CVE-2018-0316A vulnerability in the Session Initiation Protocol (SIP) call-handling functionality of Cisco IP Phone 6800, 7800, and 8800 Series Phones wiCisco IP Phone 6800, 7800, and 8800 Series unknown
- CVE-2018-0317A vulnerability in the web interface of Cisco Prime Collaboration Provisioning (PCP) could allow an authenticated, remote attacker to escalaCisco Prime Collaboration Provisioning unknown
- CVE-2018-0318A vulnerability in the password reset function of Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attackCisco Prime Collaboration Provisioning unknown
- CVE-2018-0319A vulnerability in the password recovery function of Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attCisco Prime Collaboration Provisioning unknown
- CVE-2018-0320A vulnerability in the web framework code of Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker toCisco Prime Collaboration Provisioning unknown
- CVE-2018-0321A vulnerability in Cisco Prime Collaboration Provisioning (PCP) could allow an unauthenticated, remote attacker to access the Java Remote MeCisco Prime Collaboration Provisioning unknown
- CVE-2018-0322A vulnerability in the web management interface of Cisco Prime Collaboration Provisioning (PCP) could allow an authenticated, remote attackeCisco Prime Collaboration Provisioning unknown
- CVE-2018-0353A vulnerability in traffic-monitoring functions in Cisco Web Security Appliance (WSA) could allow an unauthenticated, remote attacker to cirCisco Web Security Appliance unknown
- CVE-2017-16056mssql.js was a malicious module published with the intent to hijack environment variables.HackerOne mssql.js node module · mssql.js
- CVE-2017-16057nodemssql was a malicious module published with the intent to hijack environment variables.HackerOne nodemssql node module · nodemssql
- CVE-2017-16058gruntcli was a malicious module published with the intent to hijack environment variables.HackerOne gruntcli node module · gruntcli
- CVE-2017-16059mssql-node was a malicious module published with the intent to hijack environment variables.HackerOne mssql-node node module · mssql-node
- CVE-2017-16060babelcli was a malicious module published with the intent to hijack environment variables.HackerOne babelcli node module · babelcli
- CVE-2017-16063node-opensl was a malicious module published with the intent to hijack environment variables.HackerOne node-opensl node module · node-opensl
- CVE-2017-16064node-openssl was a malicious module published with the intent to hijack environment variables.HackerOne node-openssl node module · node-openssl
- CVE-2017-16065openssl.js was a malicious module published with the intent to hijack environment variables.HackerOne openssl.js node module · openssl.js
- CVE-2017-16066opencv.js was a malicious module published with the intent to hijack environment variables.HackerOne opencv.js node module · opencv.js
- CVE-2017-16067node-opencv was a malicious module published with the intent to hijack environment variables.HackerOne node-opencv node module · node-opencv
- CVE-2017-16068ffmepg was a malicious module published with the intent to hijack environment variables.HackerOne ffmepg node module · ffmepg
- CVE-2017-16069nodeffmpeg was a malicious module published with the intent to hijack environment variables.HackerOne nodeffmpeg node module · nodeffmpeg
- CVE-2017-16070nodecaffe was a malicious module published with the intent to hijack environment variables.HackerOne nodecaffe node module · nodecaffe
- CVE-2017-16071nodemailer-js was a malicious module published with the intent to hijack environment variables.HackerOne nodemailer-js node module · nodemailer-js
- CVE-2017-16072nodemailer.js was a malicious module published with the intent to hijack environment variables.HackerOne nodemailer.js node module · nodemailer.js
- CVE-2017-16073noderequest was a malicious module published with the intent to hijack environment variables.HackerOne noderequest node module · noderequest
- CVE-2017-16074crossenv was a malicious module published with the intent to hijack environment variables.HackerOne crossenv node module · crossenv
- CVE-2017-16075http-proxy.js was a malicious module published with the intent to hijack environment variables.HackerOne http-proxy.js node module · http-proxy.js
- CVE-2017-16076proxy.js was a malicious module published with the intent to hijack environment variables.HackerOne proxy.js node module · proxy.js
- CVE-2017-16077mongose was a malicious module published with the intent to hijack environment variables.HackerOne mongose node module · mongose
- CVE-2017-16078shadowsock was a malicious module published with the intent to hijack environment variables.HackerOne shadowsock node module · shadowsock
- CVE-2017-16079smb was a malicious module published with the intent to hijack environment variables.HackerOne smb node module · smb
- CVE-2017-16080nodesass was a malicious module published with the intent to hijack environment variables.HackerOne nodesass node module · nodesass
- CVE-2017-16081cross-env.js was a malicious module published with the intent to hijack environment variables.HackerOne cross-env.js node module · cross-env.js
- CVE-2017-16082A remote code execution vulnerability was found within the pg module when the remote database or query specifies a specially crafted column HackerOne pg node module · pg
- CVE-2017-16083node-simple-router is a minimalistic router for Node.HackerOne node-simple-router node module · node-simple-rout…
- CVE-2017-16084list-n-stream is a server for static files to list and stream local videos.HackerOne list-n-stream node module · list-n-stream
- CVE-2017-16085tinyserver2 is a webserver for static files.HackerOne tinyserver2 node module · tinyserver2
- CVE-2017-16086ua-parser is a port of Browserscope's user agent parser.HackerOne ua-parser node module · ua-parser
- CVE-2017-16088The safe-eval module describes itself as a safer version of eval.HackerOne safe-eval node module · safe-eval
- CVE-2017-16089serverlyr is a simple http server.HackerOne serverlyr node module · serverlyr
- CVE-2017-16090fsk-server is a simple http server.HackerOne fsk-server node module · fsk-server
- CVE-2017-16091xtalk helps your browser talk to nodex, a simple web framework.HackerOne xtalk node module · xtalk
- CVE-2017-16092Sencisho is a simple http server for local development.HackerOne sencisho node module · sencisho
- CVE-2017-16093cyber-js is a simple http server.HackerOne cyber-js node module · cyber-js
- CVE-2017-16094iter-http is a server for static files.HackerOne iter-http node module · iter-http
- CVE-2017-16095serverliujiayi1 is a simple http server.HackerOne serverliujiayi1 node module · serverliujiayi1
- CVE-2017-16096serveryaozeyan is a simple HTTP server.HackerOne serveryaozeyan node module · serveryaozeyan
- CVE-2017-16097tiny-http is a simple http server.HackerOne tiny-http node module · tiny-http
- CVE-2017-16098charset 1.0.0 and below are vulnerable to regular expression denial of service.HackerOne charset node module · charset
- CVE-2017-16099The no-case module is vulnerable to regular expression denial of service.HackerOne no-case node module · no-case
- CVE-2017-16100dns-sync is a sync/blocking dns resolver.HackerOne dns-sync node module · dns-sync
- CVE-2017-16101serverwg is a simple http server.HackerOne serverwg node module · serverwg
- CVE-2017-16102serverhuwenhui is a simple http server.HackerOne serverhuwenhui node module · serverhuwenhui
- CVE-2017-16103serveryztyzt is a simple http server.HackerOne serveryztyzt node module · serveryztyzt
- CVE-2017-16104citypredict.whauwiller is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the urlHackerOne citypredict.whauwiller node module · citypredict.…
- CVE-2017-16105serverwzl is a simple http server.HackerOne serverwzl node module · serverwzl
- CVE-2017-16106tmock is a static file server.HackerOne tmock node module · tmock
- CVE-2017-16107pooledwebsocket is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.HackerOne pooledwebsocket node module · pooledwebsocket
- CVE-2017-16108gaoxiaotingtingting is an HTTP server.HackerOne gaoxiaotingtingting node module · gaoxiaotingting…
- CVE-2017-16109easyquick is a simple web server.HackerOne easyquick node module · easyquick
- CVE-2017-16110weather.swlyons is a simple web server for weather updates.HackerOne weather.swlyons node module · weather.swlyons
- CVE-2017-16111The content module is a module to parse HTTP Content-* headers.HackerOne content node module · content
- CVE-2017-16113The parsejson module is vulnerable to regular expression denial of service when untrusted user input is passed into it to be parsed.HackerOne parsejson node module · parsejson
- CVE-2017-16114The marked module is vulnerable to a regular expression denial of service.HackerOne marked node module · marked
- CVE-2017-16115The timespan module is vulnerable to regular expression denial of service.HackerOne timespan node module · timespan
- CVE-2017-16116The string module is a module that provides extra string operations.HackerOne string node module · string
- CVE-2017-16117slug is a module to slugify strings, even if they contain unicode.HackerOne slug node module · slug
- CVE-2017-16118The forwarded module is used by the Express.js framework to handle the X-Forwarded-For header.HackerOne forwarded node module · forwarded
- CVE-2017-16120liyujing is a static file server.HackerOne liyujing node module · liyujing
- CVE-2017-16121datachannel-client is a signaling implementation for DataChannel.js.HackerOne datachannel-client node module · datachannel-clie…
- CVE-2017-16122cuciuci is a simple fileserver.HackerOne cuciuci node module · cuciuci
- CVE-2017-16123welcomyzt is a simple file server.HackerOne welcomyzt node module · welcomyzt
- CVE-2017-16124node-server-forfront is a simple static file server.HackerOne node-server-forfront node module · node-server-fo…
- CVE-2017-16125rtcmulticonnection-client is a signaling implementation for RTCMultiConnection.js, a multi-session manager.HackerOne rtcmulticonnection-client node module · rtcmultic…
- CVE-2017-16126The module botbait is a tool to be used to track bot and automated tools usage with-in the npm ecosystem.botbait
- CVE-2017-16127The module pandora-doomsday infects other modules.HackerOne pandora-doomsday node module · pandora-doomsday
- CVE-2017-16128The module npm-script-demo opened a connection to a command and control server.HackerOne npm-script-demo node module · npm-script-demo
- CVE-2017-16129The HTTP client module superagent is vulnerable to ZIP bomb attacks.HackerOne superagent node module · superagent
- CVE-2017-16130exxxxxxxxxxx is an Http eX Frame Google Style JavaScript Guide.HackerOne exxxxxxxxxxx node module · exxxxxxxxxxx
- CVE-2017-16131unicorn-list is a web framework.HackerOne unicorn-list node module · unicorn-list
- CVE-2017-16132simple-npm-registry is a local npm package cache.HackerOne simple-npm-registry node module · simple-npm-regi…
- CVE-2017-16133goserv is an http server.HackerOne goserv node module · goserv
- CVE-2017-16134http_static_simple is an http server.HackerOne http_static_simple node module · http_static_simp…
- CVE-2017-16135serverzyy is a static file server.HackerOne serverzyy node module · serverzyy
- CVE-2017-16136method-override is a module used by the Express.js framework to let you use HTTP verbs such as PUT or DELETE in places where the client doesHackerOne method-override node module · method-override
- CVE-2017-16137The debug module is vulnerable to regular expression denial of service when untrusted user input is passed into the o formatter.HackerOne debug node module · debug
- CVE-2017-16139jikes is a file server.HackerOne jikes node module · jikes
- CVE-2017-16140lab6.brit95 is a file server.HackerOne lab6.brit95 node module · lab6.brit95
- CVE-2017-16141lab6drewfusbyu is an http server.HackerOne lab6drewfusbyu node module · lab6drewfusbyu
- CVE-2017-16142infraserver is a RESTful server.HackerOne infraserver node module · infraserver
- CVE-2017-16143commentapp.stetsonwood is an http server.HackerOne commentapp.stetsonwood node module · commentapp.s…
- CVE-2017-16144myserver.alexcthomas18 is a file server.HackerOne myserver.alexcthomas18 node module · myserver.ale…
- CVE-2017-16145sspa is a server dedicated to single-page apps.HackerOne sspa node module · sspa
- CVE-2017-16146mockserve is a file server.HackerOne mockserve node module · mockserve
- CVE-2017-16147shit-server is a file server.HackerOne shit-server node module · shit-server
- CVE-2017-16148serve46 is a static file server.HackerOne serve46 node module · serve46
- CVE-2017-16149zwserver is a weather web server.HackerOne zwserver node module · zwserver
- CVE-2017-16150wanggoujing123 is a simple webserver.HackerOne wangguojing123 node module · wangguojing123
- CVE-2017-16151Based on details posted by the ElectronJS team; A remote code execution vulnerability has been discovered in Google Chromium that affects alHackerOne electron node module · electron
- CVE-2017-16152static-html-server is a static file server.HackerOne static-html-server node module · static-html-serv…
- CVE-2017-16154earlybird is a web server module for early development.HackerOne earlybird node module · earlybird
- CVE-2017-16155fast-http-cli is the command line interface for fast-http, a simple web server.HackerOne fast-http-cli node module · fast-http-cli
- CVE-2017-16156myprolyz is a static file server.HackerOne myprolyz node module · myprolyz
- CVE-2017-16157censorify.tanisjr is a simple web server and API RESTful service.HackerOne censorify.tanisjr node module · censorify.tanisjr
- CVE-2017-16158dcserver is a static file server.HackerOne dcserver node module · dcserver
- CVE-2017-16159caolilinode is a simple file server.HackerOne caolilinode node module · caolilinode
- CVE-2017-1616011xiaoli is a simple file server.HackerOne 11xiaoli node module · 11xiaoli
- CVE-2017-16161shenliru is a simple file server.HackerOne shenliru node module · shenliru
- CVE-2017-1616222lixian is a simple file server.HackerOne 22lixian node module · 22lixian
- CVE-2017-16163dylmomo is a simple file server.HackerOne dylmomo node module · dylmomo
- CVE-2017-16164desafio is a simple web server.HackerOne desafio node module · desafio
- CVE-2017-16165calmquist.static-server is a static file server.HackerOne calmquist.static-server node module · calmquist.s…
- CVE-2017-16166byucslabsix is an http server.HackerOne byucslabsix node module · byucslabsix
- CVE-2017-16167yyooopack is a simple file server.HackerOne yyooopack node module · yyooopack
- CVE-2017-16168wffserve is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.HackerOne wffserve node module · wffserve
- CVE-2017-16169looppake is a simple http server.HackerOne looppake node module · looppake
- CVE-2017-16170liuyaserver is a static file server.HackerOne liuyaserver node module · liuyaserver
- CVE-2017-16171hcbserver is a static file server.HackerOne hcbserver node module · hcbserver
- CVE-2017-16172section2.madisonjbrooks12 is a simple web server.HackerOne section2.madisonjbrooks12 node module · section2.…
- CVE-2017-16173utahcityfinder constructs lists of Utah cities with a certain prefix.HackerOne utahcityfinder node module · utahcityfinder
- CVE-2017-16174whispercast is a file server.HackerOne whispercast node module · whispercast
- CVE-2017-16175ewgaddis.lab6 is a file server.HackerOne ewgaddis.lab6 node module · ewgaddis.lab6
- CVE-2017-16176jansenstuffpleasework is a file server.HackerOne jansenstuffpleasework node module · jansenstuffpl…
- CVE-2017-16177chatbyvista is a file server.HackerOne chatbyvista node module · chatbyvista
- CVE-2017-16178intsol-package is a file server.HackerOne intsol-package node module · intsol-package
- CVE-2017-16179dasafio is a web server.HackerOne dasafio node module · dasafio
- CVE-2017-16180serverabc is a static file server.HackerOne serverabc node module · serverabc
- CVE-2017-16181wintiwebdev is a static file server.HackerOne wintiwebdev node module · wintiwebdev
- CVE-2017-16182serverxxx is a static file server.HackerOne serverxxx node module · serverxxx
- CVE-2017-16183iter-server is a static file server.iter-server
- CVE-2017-16184scott-blanch-weather-app is a sample Node.js app using Express 4.HackerOne scott-blanch-weather-app node module · scott-blan…
- CVE-2017-16185uekw1511server is a static file server.HackerOne uekw1511server node module · uekw1511server
- CVE-2017-16186360class.jansenhm is a static file server.HackerOne 360class.jansenhm node module · 360class.jansenhm
- CVE-2017-16187open-device creates a web interface for any device.HackerOne open-device node module · open-device
- CVE-2017-16188reecerver is a web server.HackerOne reecerver node module · reecerver
- CVE-2017-16189sly07 is an API for censoring text.HackerOne sly07 node module · sly07
- CVE-2017-16190dcdcdcdcdc is a static file server.HackerOne dcdcdcdcdc node module · dcdcdcdcdc
- CVE-2017-16191cypserver is a static file server.HackerOne cypserver node module · cypserver
- CVE-2017-16192getcityapi.yoehoehne is a web server.HackerOne getcityapi.yoehoehne node module · getcityapi.yoe…
- CVE-2017-16193mfrs is a static file server.HackerOne mfrs node module · mfrs
- CVE-2017-16194picard is a micro framework.HackerOne picard node module · picard
- CVE-2017-16195pytservce is a static file server.HackerOne pytservce node module · pytservce
- CVE-2017-16196quickserver is a simple static file server.HackerOne quickserver node module · quickserver
- CVE-2017-16197qinserve is a static file server.HackerOne qinserve node module · qinserve
- CVE-2017-16198ritp is a static web server.ritp
- CVE-2017-16199susu-sum is a static file server.HackerOne susu-sum node module · susu-sum
- CVE-2017-16200uv-tj-demo is a static file server.HackerOne uv-tj-demo node module · uv-tj-demo
- CVE-2017-16201zjjserver is a static file server.HackerOne zjjserver node module · zjjserver
- CVE-2017-16202The cofeescript module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installatHackerOne coffeescript node module · cofeescript
- CVE-2017-16203The coffe-script module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installaHackerOne coffeescript node module · coffe-script
- CVE-2017-16204The jquey module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installation.HackerOne jquey node module · jquey
- CVE-2017-16205The coffescript module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installatHackerOne coffeescript node module · coffescript
- CVE-2017-16206The cofee-script module exfiltrates sensitive data such as a user's private SSH key and bash history to a third party server during installacofee-script
- CVE-2017-16207discordi.js is a malicious module based on the discord.js library that exfiltrates login tokens to pastebin.HackerOne discordi.js node module · discordi.js
- CVE-2017-16208dmmcquay.lab6 is a REST server.HackerOne dmmcquay.lab6 node module · dmmcquay.lab6
- CVE-2017-16209enserver is a simple web server.HackerOne enserver node module · enserver
- CVE-2017-16210jn_jj_server is a static file server.HackerOne jn_jj_server node module · jn_jj_server
- CVE-2017-16211lessindex is a static file server.HackerOne lessindex node module · lessindex
- CVE-2017-16212ltt is a static file server.HackerOne ltt node module · ltt
- CVE-2017-16213mfrserver is a simple file server.HackerOne mfrserver node module · mfrserver
- CVE-2017-16214peiserver is a static file server.HackerOne peiserver node module · peiserver
- CVE-2017-16215sgqserve is a simple file server.HackerOne sgqserve node module · sgqserve
- CVE-2017-16216tencent-server is a simple web server.HackerOne tencent-server node module · tencent-server
- CVE-2017-16217fbr-client sends files through sockets via socket.io and webRTC.HackerOne fbr-client node module · fbr-client
- CVE-2017-16218dgard8.lab6 is a static file server.HackerOne dgard8.lab6 node module · dgard8.lab6
- CVE-2017-16219yttivy is a static file server.HackerOne yttivy node module · yttivy
- CVE-2017-16220wind-mvc is an mvc framework.HackerOne wind-mvc node module · wind-mvc
- CVE-2017-16221yzt is a simple file server.HackerOne yzt node module · yzt
- CVE-2017-16222elding is a simple web server.HackerOne elding node module · elding
- CVE-2017-16223nodeaaaaa is a static file server.HackerOne nodeaaaaa node module · nodeaaaaa
- CVE-2017-16224st is a module for serving static files.HackerOne st node module · st
- CVE-2017-16225aegir is a module to help automate JavaScript project management.HackerOne aegir node module · aegir
- CVE-2017-16226The static-eval module is intended to evaluate statically-analyzable expressions.HackerOne static-eval node module node module · static-eval
- CVE-2018-3711Fastify node module before 0.38.0 is vulnerable to a denial-of-service attack by sending a request with "Content-Type: application/json" andHackerOne fastify node module · fastify
- CVE-2018-3712serve node module before 6.4.9 suffers from a Path Traversal vulnerability due to not handling %2e (.) and %2f (/) and allowing them in pathHackerOne serve node module · serve
- CVE-2018-3713angular-http-server node module suffers from a Path Traversal vulnerability due to lack of validation of possibleFilename, which allows a maHackerOne angular-http-server node module · angular-http-se…
- CVE-2018-3714node-srv node module suffers from a Path Traversal vulnerability due to lack of validation of url, which allows a malicious user to read conHackerOne node-srv node module · node-srv
- CVE-2018-3715glance node module before 3.0.4 suffers from a Path Traversal vulnerability due to lack of validation of path passed to it, which allows a mHackerOne glance node module · glance
- CVE-2018-3716simplehttpserver node module suffers from a Cross-Site Scripting vulnerability to a lack of validation of file names.HackerOne simplehttpserver node module · simplehttpserver
- CVE-2018-3717connect node module before 2.14.0 suffers from a Cross-Site Scripting (XSS) vulnerability due to a lack of validation of file in directory.jHackerOne connect node module · connect
- CVE-2018-3718serve node module suffers from Improper Handling of URL Encoding by permitting access to ignored files if a filename is URL encoded.HackerOne serve node module · serve
- CVE-2018-3719mixin-deep node module before 1.3.1 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability, which allows a malicious useHackerOne mixin-deep node module · mixin-deep
- CVE-2018-3720assign-deep node module before 0.4.7 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability, which allows a malicious usHackerOne assign-deep node module · assign-deep
- CVE-2018-3721lodash node module before 4.17.5 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability via defaultsDeep, merge, and merHackerOne lodash node module · lodash +1
- CVE-2018-3722merge-deep node module before 3.0.1 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability, which allows a malicious useHackerOne merge-deep node module · merge-deep
- CVE-2018-3723defaults-deep node module before 0.2.4 suffers from a Modification of Assumed-Immutable Data (MAID) vulnerability, which allows a malicious HackerOne defaults-deep node module · defaults-deep
- CVE-2018-3724general-file-server node module suffers from a Path Traversal vulnerability due to lack of validation of currpath, which allows a malicious HackerOne general-file-server node module · general-file-se…
- CVE-2018-3725hekto node module suffers from a Path Traversal vulnerability due to lack of validation of file, which allows a malicious user to read conteHackerOne hekto node module · hekto
- CVE-2018-3726crud-file-server node module before 0.8.0 suffers from a Cross-Site Scripting vulnerability to a lack of validation of file names.HackerOne crud-file-server node module · crud-file-server
- CVE-2018-3727626 node module suffers from a Path Traversal vulnerability due to lack of validation of file, which allows a malicious user to read contentHackerOne 626 node module · 626
- CVE-2018-3729localhost-now node module suffers from a Path Traversal vulnerability due to lack of validation of file, which allows a malicious user to reHackerOne localhost-now node module · localhost-now
- CVE-2018-3730mcstatic node module suffers from a Path Traversal vulnerability due to lack of validation of filePath, which allows a malicious user to reaHackerOne mcstatic node module · mcstatic
- CVE-2018-3731public node module suffers from a Path Traversal vulnerability due to lack of validation of filePath, which allows a malicious user to read HackerOne public node module · public
- CVE-2018-3732resolve-path node module before 1.4.0 suffers from a Path Traversal vulnerability due to lack of validation of paths with certain special chHackerOne resolve-path node module · resolve-path
- CVE-2018-3735bracket-template suffers from reflected XSS possible when variable passed via GET parameter is used in templateHackerOne bracket-template node module · bracket-template
- CVE-2018-3737sshpk is vulnerable to ReDoS when parsing crafted invalid public keys.HackerOne sshpk node module · sshpk
- CVE-2018-3738protobufjs is vulnerable to ReDoS when parsing crafted invalid .proto files.HackerOne protobufjs node module · protobufjs
- CVE-2018-3739https-proxy-agent before 2.1.1 passes auth option to the Buffer constructor without proper sanitization, resulting in DoS and uninitialized HackerOne https-proxy-agent node module · https-proxy-agent