Vulnerabilities

TI-2014-07752 CVE-2014-9530 · GHSA-mf5x-3xwq-75m6

A vulnerability exists in nw.js before 0.11.3 when calling nw methods from normal frames…

MEDIUM 44

A vulnerability exists in nw.js before 0.11.3 when calling nw methods from normal frames, which has an unspecified impact.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01162 Published 2020-02-07 No fix listed

TI-2016-08629 CVE-2016-10588 · GHSA-hv96-xxx2-5v7w

LOW 39

nw is an installer for nw.js.

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.01728 Published 2018-06-01 Fixed in 0.23.6-1 CWE-311

TI-2014-07912 CVE-2014-9733 · GHSA-28gq-qhxx-jq4f

MEDIUM 45

nw.js before 0.11.5 can simulate user input events in a normal frame, which allows remote attackers to have unspecified impact via unknown vectors.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01387 Published 2017-10-17 No fix listed CWE-20