194 matches found
ejs vulnerable to DoS due to weak input validation
nodejs ejs version older than 2.5.5 is vulnerable to a denial-of-service due to weak input validation in ejs.renderFile...
192.168.0.172 (4.6.1), 2d-json-schema-editor-visual (>=1.0.2, <=1.0.7) +620 more potentially affected by CVE-2017-1000189 via ejs (>=2.0.8, <=2.5.4)
ejs NPM version =2.0.8, =1.0.2, =0.0.1, =0.1.0, =0.1.0, =0.1.8, =1.0.0, =1.0.1, =0.1.9, =0.1.14 - @mobileit/sails 0.12.14 and more Source cves: CVE-2017-1000189 Source advisory: GHSA-6X77-RPQF-J6MW...
192.168.0.172 (4.6.1), 2d-json-schema-editor-visual (>=1.0.2, <=1.0.7) +620 more potentially affected by CVE-2017-1000189 via ejs (>=2.0.8, <=2.5.4)
ejs NPM version =2.0.8, =1.0.2, =0.0.1, =0.1.0, =0.1.0, =0.1.8, =1.0.0, =1.0.1, =0.1.9, =0.1.14 - @mobileit/sails 0.12.14 and more Source cves: CVE-2017-1000189 Source advisory: OSV:GHSA-6X77-RPQF-J6MW...
ejs is vulnerable to remote code execution due to weak input validation
nodejs ejs versions older than 2.5.3 is vulnerable to remote code execution due to weak input validation in ejs.renderFile function...
GHSA-3W5V-P54C-F74X ejs is vulnerable to remote code execution due to weak input validation
nodejs ejs versions older than 2.5.3 is vulnerable to remote code execution due to weak input validation in ejs.renderFile function...
192.168.0.172 (4.6.1), 2d-json-schema-editor-visual (>=1.0.2, <=1.0.7) +620 more potentially affected by CVE-2017-1000228 via ejs (>=2.0.8, <=2.5.4)
ejs NPM version =2.0.8, =1.0.2, =0.0.1, =0.1.0, =0.1.0, =0.1.8, =1.0.0, =1.0.1, =0.1.9, =0.1.14 - @mobileit/sails 0.12.14 and more Source cves: CVE-2017-1000228 Source advisory: OSV:GHSA-3W5V-P54C-F74X...
192.168.0.172 (4.6.1), 2d-json-schema-editor-visual (>=1.0.2, <=1.0.7) +619 more potentially affected by CVE-2017-1000228 via ejs (>=2.0.8, <=2.5.2)
ejs NPM version =2.0.8, =1.0.2, =0.0.1, =0.1.0, =0.1.0, =0.1.8, =1.0.0, =1.0.1, =0.1.9, =0.1.14 - @mobileit/sails 0.12.14 and more Source cves: CVE-2017-1000228 Source advisory: GHSA-3W5V-P54C-F74X...
GHSA-HWCF-PP87-7X6P mde ejs vulnerable to XSS
nodejs ejs version older than 2.5.5 is vulnerable to a Cross-site-scripting in the ejs.renderFile resulting in code injection...
192.168.0.172 (4.6.1), 2d-json-schema-editor-visual (>=1.0.2, <=1.0.7) +620 more potentially affected by CVE-2017-1000188 via ejs (>=2.0.8, <=2.5.4)
ejs NPM version =2.0.8, =1.0.2, =0.0.1, =0.1.0, =0.1.0, =0.1.8, =1.0.0, =1.0.1, =0.1.9, =0.1.14 - @mobileit/sails 0.12.14 and more Source cves: CVE-2017-1000188 Source advisory: OSV:GHSA-HWCF-PP87-7X6P...
192.168.0.172 (4.6.1), 2d-json-schema-editor-visual (>=1.0.2, <=1.0.7) +620 more potentially affected by CVE-2017-1000188 via ejs (>=2.0.8, <=2.5.4)
ejs NPM version =2.0.8, =1.0.2, =0.0.1, =0.1.0, =0.1.0, =0.1.8, =1.0.0, =1.0.1, =0.1.9, =0.1.14 - @mobileit/sails 0.12.14 and more Source cves: CVE-2017-1000188 Source advisory: GHSA-HWCF-PP87-7X6P...
CVE-2017-1000189
nodejs ejs version older than 2.5.5 is vulnerable to a denial-of-service due to weak input validation in the ejs.renderFile...
CVE-2017-1000188
nodejs ejs version older than 2.5.5 is vulnerable to a Cross-site-scripting in the ejs.renderFile resulting in code injection...
Denial Of Service (DoS)
ejs is vulnerable to denial of service DoS attacks. The library does not sanitize the opts parameter in the ejs.renderFile function, allowing a malicious user to pass files that when rendered can crash the application...
Cross-site Scripting (XSS)
ejs is vulnerable to cross-site scripting XSS attacks. The library does not sanitize the opts parameter in the cpOptsInData function, allowing a malicious user to pass files that can get executed when rendered...
UBUNTU-CVE-2017-1000188
nodejs ejs version older than 2.5.5 is vulnerable to a Cross-site-scripting in the ejs.renderFile resulting in code injection...
CVE-2017-1000189
nodejs ejs version older than 2.5.5 is vulnerable to a denial-of-service due to weak input validation in the ejs.renderFile...
UBUNTU-CVE-2017-1000189
nodejs ejs version older than 2.5.5 is vulnerable to a denial-of-service due to weak input validation in the ejs.renderFile...
Input validation
nodejs ejs version older than 2.5.5 is vulnerable to a denial-of-service due to weak input validation in the ejs.renderFile...
