Lucene search
+L

Node-serialize Package For Node.js 'unserialize()' Function Arbitrary Code Execution Vulnerability

🗓️ 13 Feb 2017 00:00:00Reported by China National Vulnerability DatabaseType 
cnvd
 cnvd
🔗 www.cnvd.org.cn👁 12 Views

Node-serialize vulnerability allows arbitrary code execution through insecure unserialize input in Node.js.

Related
Refs
ReporterTitlePublishedViews
Family
zdt
zdt
Node.JS - (node-serialize) Remote Code Execution Exploit (3)
18 Jun 202100:00
zdt
circl
Circl
CVE-2017-5941
12 Oct 202515:00
circl
checkpoint_advisories
Check Point Advisories
Node.js Remote Code Execution (CVE-2017-5941)
24 Feb 202100:00
checkpoint_advisories
cve
CVE
CVE-2017-5941
9 Feb 201719:00
cve
cvelist
Cvelist
CVE-2017-5941
9 Feb 201719:00
cvelist
exploitdb
Exploit DB
Node.JS - 'node-serialize' Remote Code Execution
8 Feb 201700:00
exploitdb
exploitdb
Exploit DB
Node.JS - 'node-serialize' Remote Code Execution (2)
10 Feb 202100:00
exploitdb
exploitdb
Exploit DB
Node.JS - 'node-serialize' Remote Code Execution (3)
18 Jun 202100:00
exploitdb
github
Github Security Blog
Code Execution through IIFE in node-serialize
18 Jul 201818:27
github
nodejs
nodejs
Code Execution through IIFE
9 Feb 201716:30
nodejs
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

20 Feb 2017 00:00Current
7.9High risk
Vulners AI Score7.9
CVSS 27.5
CVSS 3.19.8
EPSS0.61025
12