Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Joyent Component: Node.js Clear all filters
TI-2014-05994 CVE-2014-7192 · GHSA-5726-g6r9-5f22

Eval injection vulnerability in index.js in the syntax-error package before 1.1.1 for…

Priority MEDIUM 57

Eval injection vulnerability in index.js in the syntax-error package before 1.1.1 for Node.js 0.10.x, as used in IBM Rational Application Developer and other products, allows remote attackers to execute arbitrary code vi…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.13048 Published 2014-12-11 Fixed in 1.1.1 CWE-94
TI-2014-05260 CVE-2014-6394 · GHSA-xwg4-93c6-3h42

visionmedia send before 0.8.4 for Node.js uses a partial comparison for verifying whether…

Priority MEDIUM 40

visionmedia send before 0.8.4 for Node.js uses a partial comparison for verifying whether a directory is within the document root, which allows remote attackers to access restricted directories, as demonstrated using "pu…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0434 Published 2014-10-08 Partial fix · 0.8.4 CWE-22