Nwjs

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Nwjs records in CISA KEV

No Nwjs vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records

TI-2014-07912 CVE-2014-9733 · GHSA-28gq-qhxx-jq4f

MEDIUM 45

nw.js before 0.11.5 can simulate user input events in a normal frame, which allows remote attackers to have unspecified impact via unknown vectors.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01387 Published 2017-10-17 No fix listed CWE-20

TI-2014-07752 CVE-2014-9530 · GHSA-mf5x-3xwq-75m6

MEDIUM 44

A vulnerability exists in nw.js before 0.11.3 when calling nw methods from normal frames, which has an unspecified impact.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01162 Published 2020-02-07 No fix listed

TI-2016-08629 CVE-2016-10588 · GHSA-hv96-xxx2-5v7w

LOW 39

nw is an installer for nw.js.

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.01728 Published 2018-06-01 Fixed in 0.23.6-1 CWE-311