Read the docs

Joyent

Records20All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high15CVSS 7.0–8.9

Exploited now

Joyent records in CISA KEV

No Joyent vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Smartos 14 records MEDIUM Node.js 2 records MEDIUM Http-signature 1 record LOW Json 1 record MEDIUM Sshpk 1 record LOW Triton Datacenter 1 record MEDIUM

Records

20 records

TI-2014-05994 CVE-2014-7192 · GHSA-5726-g6r9-5f22

Eval injection vulnerability in index.js in the syntax-error package before 1.1.1 for…

Priority MEDIUM 57

Eval injection vulnerability in index.js in the syntax-error package before 1.1.1 for Node.js 0.10.x, as used in IBM Rational Application Developer and other products, allows remote attackers to execute arbitrary code vi…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.13048 Published 2014-12-11 Fixed in 1.1.1 CWE-94
TI-2017-08026 CVE-2017-10940 · GHSA-hgcr-2ccf-92wv

Path traversal in Joyent Smart Data Center

Priority MEDIUM 46

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Joyent Smart Data Center prior to [email protected] (e469cf49-4de3-4658-8419-a…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.05423 Published 2017-10-31 No fix listed CWE-22
TI-2020-06232 CVE-2020-7712 · GHSA-3c6g-pvg8-gqw2

Command injection in json

Priority MEDIUM 45

This affects the package json before 10.0.0.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.03112 Published 2020-08-30 Fixed in 10.0.0 CWE-78
TI-2014-05260 CVE-2014-6394 · GHSA-xwg4-93c6-3h42

visionmedia send before 0.8.4 for Node.js uses a partial comparison for verifying whether…

Priority MEDIUM 40

visionmedia send before 0.8.4 for Node.js uses a partial comparison for verifying whether a directory is within the document root, which allows remote attackers to access restricted directories, as demonstrated using "pu…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0434 Published 2014-10-08 Partial fix · 0.8.4 CWE-22
TI-2016-07190 CVE-2016-8733 · GHSA-9gx4-xhr5-rc9m

Integer overflow in Joyent SmartOS

Priority LOW 39

An exploitable integer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00554 Published 2016-12-14 No fix listed CWE-190
TI-2016-07394 CVE-2016-9031 · GHSA-9vxv-mj8f-wqwx

Integer overflow in Joyent SmartOS

Priority LOW 35

An exploitable integer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00488 Published 2016-12-14 No fix listed CWE-190
TI-2018-01082 CVE-2018-1166 · GHSA-x8h6-px62-hfm6

Use after free in Joyent SmartOS

Priority LOW 34

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Joyent SmartOS release-20170803-20170803T064301Z.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00376 Published 2018-02-21 No fix listed CWE-416
TI-2016-07398 CVE-2016-9035 · GHSA-wjqr-x67w-c27x

Buffer overflow in Joyent SmartOS

Priority LOW 32

An exploitable buffer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00544 Published 2016-12-14 No fix listed CWE-120
TI-2018-01087 CVE-2018-1171 · GHSA-22m5-wfj3-68rw

Out-of-bounds write in Joyent SmartOS

Priority LOW 31

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Joyent SmartOS release-20170803-20170803T064301Z.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00444 Published 2018-03-19 No fix listed CWE-787
TI-2018-01081 CVE-2018-1165 · GHSA-26qq-h2w9-r3wv

Heap-based buffer overflow in Joyent SmartOS

Priority LOW 31

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Joyent SmartOS release-20170803-20170803T064301Z.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00499 Published 2018-02-21 No fix listed CWE-122
TI-2016-07397 CVE-2016-9034 · GHSA-w6pc-m3rh-gpq7

Buffer overflow in Joyent SmartOS

Priority LOW 31

An exploitable buffer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00528 Published 2016-12-14 No fix listed CWE-120
TI-2016-07396 CVE-2016-9033 · GHSA-rcg2-gfwm-q6xp

Buffer overflow in Joyent SmartOS

Priority LOW 31

An exploitable buffer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00528 Published 2016-12-14 No fix listed CWE-120
TI-2016-07395 CVE-2016-9032 · GHSA-f247-ph8x-mj56

Buffer overflow in Joyent SmartOS

Priority LOW 31

An exploitable buffer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00528 Published 2016-12-14 No fix listed CWE-120
TI-2016-07402 CVE-2016-9039 · GHSA-h4vg-vpxq-866j

Uncontrolled resource consumption in Joyent SmartOS

Priority LOW 28

An exploitable denial of service exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system.

CVSS 3.0MEDIUM 6.2 Local No auth No interaction EPSS 0.00516 Published 2017-01-31 No fix listed CWE-400
TI-2016-07403 CVE-2016-9040 · GHSA-9x7x-fv7w-r8pq

Uncontrolled resource consumption in Joyent SmartOS

Priority LOW 25

An exploitable denial of service exists in the the Joyent SmartOS OS 20161110T013148Z Hyprlofs file system.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00473 Published 2018-09-07 No fix listed CWE-400
Open these records in search →