Read the docs

Joyent

Records20All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high15CVSS 7.0–8.9

Exploited now

Joyent records in CISA KEV

No Joyent vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Smartos 14 records MEDIUM Node.js 2 records MEDIUM Http-signature 1 record LOW Json 1 record MEDIUM Sshpk 1 record LOW Triton Datacenter 1 record MEDIUM

Records

2 records in Node.js · all components

TI-2014-05994 CVE-2014-7192 · GHSA-5726-g6r9-5f22

Eval injection vulnerability in index.js in the syntax-error package before 1.1.1 for…

Priority MEDIUM 57

Eval injection vulnerability in index.js in the syntax-error package before 1.1.1 for Node.js 0.10.x, as used in IBM Rational Application Developer and other products, allows remote attackers to execute arbitrary code vi…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.13048 Published 2014-12-11 Fixed in 1.1.1 CWE-94
TI-2014-05260 CVE-2014-6394 · GHSA-xwg4-93c6-3h42

visionmedia send before 0.8.4 for Node.js uses a partial comparison for verifying whether…

Priority MEDIUM 40

visionmedia send before 0.8.4 for Node.js uses a partial comparison for verifying whether a directory is within the document root, which allows remote attackers to access restricted directories, as demonstrated using "pu…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0434 Published 2014-10-08 Partial fix · 0.8.4 CWE-22
Open these records in search →