5008 matches found
@any4/model (>=0.0.1, <=1.2.4), @boundstate/hapi-typeorm (0.0.1) +35 more potentially affected by unknown CVE via typeorm (>=0.0.2-alpha.43, <=0.1.14)
typeorm NPM version =0.0.2-alpha.43, =0.0.1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =0.6.2, =0.1.2, =0.1.19, =0.1.0, =0.1.2 and more Source cves: unknown CVE Source advisory: OSV:GHSA-W7Q7-VJP8-7JV4...
@aliens-lyon.fr/ep_mypads (1.7.24), @buzuli/all (>=1.0.0, <=1.1.0) +811 more potentially affected by unknown CVE via mysql (>=2.0.0, <=2.13.0)
mysql NPM version =2.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.2, =4.49.0, =1.0.0, =3.2.1 and more Source cves: unknown CVE Source advisory: OSV:GHSA-5F7M-MMPC-QHH4...
GHSA-VX85-MJ8C-4QM6 vulnerabilities
Vulnerabilities for packages: trino, druid...
GHSA-9MXF-G3X6-WV74 vulnerabilities
Vulnerabilities for packages: hive...
@1337lawyers/design (>=0.1.0, <=0.1.38), @9188/w-cli (>=1.0.0, <=1.0.4) +50 more potentially affected by CVE-2018-6342 via react-dev-utils (>=5.0.0, <=5.0.1)
react-dev-utils NPM version =5.0.0, =0.1.0, =1.0.0, =0.4.1, =0.1.0-latest.1a450bb3, =1.0.5, =1.0.0-beta.28, =1.0.1, =1.0.0, =1.0.0, =0.26.4, =0.0.0-legacy, =3.10.0-beta.0, =0.1.0-alpha.0, =2.1.16, =2.3.5 - aqxy-common-ui 0.0.1 and more Source cves: CVE-2018-6342 Source advisory:...
Moderate severity vulnerability that affects org.keycloak:keycloak-core
Withdrawn: Duplicate of CVE-2017-12161 / GHSA-959q-32g8-vvp7...
Arbitrary JavaScript Execution
Overview A vulnerability exists in bassmaster = 1.5.1 that allows for an attacker to provide arbitrary JavaScript that is then executed server side via eval. Recommendation Update to bassmaster version 1.5.2 or greater. References - Commit b751602 - GitHub Advisory...