Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

20 records

Vendor: Joyent Clear all filters
TI-2021-19340 CVE-2021-43395 · GHSA-6w9w-8g4v-j4m6

An issue was discovered in illumos before f859e71…

Priority MEDIUM 58

An issue was discovered in illumos before f859e7171bb5db34321e45585839c6c3200ebb90, OmniOS Community Edition r151038, OpenIndiana Hipster 2021.04, and SmartOS 20210923.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00321 Published 2022-12-26 No fix listed CWE-667
TI-2020-06232 CVE-2020-7712 · GHSA-3c6g-pvg8-gqw2

Command injection in json

Priority MEDIUM 45

This affects the package json before 10.0.0.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.03112 Published 2020-08-30 Fixed in 10.0.0 CWE-78
TI-2016-07403 CVE-2016-9040 · GHSA-9x7x-fv7w-r8pq

Uncontrolled resource consumption in Joyent SmartOS

Priority LOW 25

An exploitable denial of service exists in the the Joyent SmartOS OS 20161110T013148Z Hyprlofs file system.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00473 Published 2018-09-07 No fix listed CWE-400
TI-2018-01087 CVE-2018-1171 · GHSA-22m5-wfj3-68rw

Out-of-bounds write in Joyent SmartOS

Priority LOW 31

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Joyent SmartOS release-20170803-20170803T064301Z.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00444 Published 2018-03-19 No fix listed CWE-787
TI-2018-01082 CVE-2018-1166 · GHSA-x8h6-px62-hfm6

Use after free in Joyent SmartOS

Priority LOW 34

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Joyent SmartOS release-20170803-20170803T064301Z.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00376 Published 2018-02-21 No fix listed CWE-416
TI-2018-01081 CVE-2018-1165 · GHSA-26qq-h2w9-r3wv

Heap-based buffer overflow in Joyent SmartOS

Priority LOW 31

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Joyent SmartOS release-20170803-20170803T064301Z.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00499 Published 2018-02-21 No fix listed CWE-122
TI-2017-08026 CVE-2017-10940 · GHSA-hgcr-2ccf-92wv

Path traversal in Joyent Smart Data Center

Priority MEDIUM 46

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Joyent Smart Data Center prior to [email protected] (e469cf49-4de3-4658-8419-a…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.05423 Published 2017-10-31 No fix listed CWE-22
TI-2016-07402 CVE-2016-9039 · GHSA-h4vg-vpxq-866j

Uncontrolled resource consumption in Joyent SmartOS

Priority LOW 28

An exploitable denial of service exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system.

CVSS 3.0MEDIUM 6.2 Local No auth No interaction EPSS 0.00516 Published 2017-01-31 No fix listed CWE-400
TI-2016-07398 CVE-2016-9035 · GHSA-wjqr-x67w-c27x

Buffer overflow in Joyent SmartOS

Priority LOW 32

An exploitable buffer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00544 Published 2016-12-14 No fix listed CWE-120
TI-2016-07397 CVE-2016-9034 · GHSA-w6pc-m3rh-gpq7

Buffer overflow in Joyent SmartOS

Priority LOW 31

An exploitable buffer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00528 Published 2016-12-14 No fix listed CWE-120
TI-2016-07396 CVE-2016-9033 · GHSA-rcg2-gfwm-q6xp

Buffer overflow in Joyent SmartOS

Priority LOW 31

An exploitable buffer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00528 Published 2016-12-14 No fix listed CWE-120
TI-2016-07395 CVE-2016-9032 · GHSA-f247-ph8x-mj56

Buffer overflow in Joyent SmartOS

Priority LOW 31

An exploitable buffer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00528 Published 2016-12-14 No fix listed CWE-120
TI-2016-07394 CVE-2016-9031 · GHSA-9vxv-mj8f-wqwx

Integer overflow in Joyent SmartOS

Priority LOW 35

An exploitable integer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00488 Published 2016-12-14 No fix listed CWE-190
TI-2016-07190 CVE-2016-8733 · GHSA-9gx4-xhr5-rc9m

Integer overflow in Joyent SmartOS

Priority LOW 39

An exploitable integer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system.

CVSS 3.1HIGH 8.8 Local Low privileges No interaction EPSS 0.00554 Published 2016-12-14 No fix listed CWE-190
TI-2014-05994 CVE-2014-7192 · GHSA-5726-g6r9-5f22

Eval injection vulnerability in index.js in the syntax-error package before 1.1.1 for…

Priority MEDIUM 57

Eval injection vulnerability in index.js in the syntax-error package before 1.1.1 for Node.js 0.10.x, as used in IBM Rational Application Developer and other products, allows remote attackers to execute arbitrary code vi…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.13048 Published 2014-12-11 Fixed in 1.1.1 CWE-94
TI-2014-05260 CVE-2014-6394 · GHSA-xwg4-93c6-3h42

visionmedia send before 0.8.4 for Node.js uses a partial comparison for verifying whether…

Priority MEDIUM 40

visionmedia send before 0.8.4 for Node.js uses a partial comparison for verifying whether a directory is within the document root, which allows remote attackers to access restricted directories, as demonstrated using "pu…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.0434 Published 2014-10-08 Partial fix · 0.8.4 CWE-22