Lucene search
+L

447 matches found

osv_debian
osv_debian
•added 2018/05/31 8:29 p.m.•14 views

DEBIAN-CVE-2016-10539

negotiator is an HTTP content negotiator for Node.js and is used by many modules and frameworks including Express and Koa. The header for "Accept-Language", when parsed by negotiator 0.6.0 and earlier is vulnerable to Regular Expression Denial of Service via a specially crafted string...

7.5CVSS7.3AI score0.01389EPSS
SaveExploits0References1
NVD
NVD
•added 2018/05/31 8:29 p.m.•42 views

CVE-2016-10539

negotiator is an HTTP content negotiator for Node.js and is used by many modules and frameworks including Express and Koa. The header for "Accept-Language", when parsed by negotiator 0.6.0 and earlier is vulnerable to Regular Expression Denial of Service via a specially crafted string...

7.5CVSS7.4AI score0.01389EPSS
SaveExploits0References1
Prion
Prion
•added 2018/05/31 8:29 p.m.•23 views

Design/Logic Flaw

negotiator is an HTTP content negotiator for Node.js and is used by many modules and frameworks including Express and Koa. The header for "Accept-Language", when parsed by negotiator 0.6.0 and earlier is vulnerable to Regular Expression Denial of Service via a specially crafted string...

5CVSS6.6AI score0.01389EPSS
SaveExploits0References1Affected Software1
osv_ubuntu
osv_ubuntu
•added 2018/05/31 8:29 p.m.•36 views

UBUNTU-CVE-2016-10539

negotiator is an HTTP content negotiator for Node.js and is used by many modules and frameworks including Express and Koa. The header for "Accept-Language", when parsed by negotiator 0.6.0 and earlier is vulnerable to Regular Expression Denial of Service via a specially crafted string...

7.5CVSS7.1AI score0.01389EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2018/05/31 8:29 p.m.•36 views

CVE-2016-10539

negotiator is an HTTP content negotiator for Node.js and is used by many modules and frameworks including Express and Koa. The header for "Accept-Language", when parsed by negotiator 0.6.0 and earlier is vulnerable to Regular Expression Denial of Service via a specially crafted string...

7.5CVSS7.1AI score0.01389EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2018/05/31 8:00 p.m.•76 views

CVE-2016-10539

negotiator is an HTTP content negotiator for Node.js and is used by many modules and frameworks including Express and Koa. The header for "Accept-Language", when parsed by negotiator 0.6.0 and earlier is vulnerable to Regular Expression Denial of Service via a specially crafted string...

7.5CVSS7.4AI score0.01389EPSS
SaveExploits0
Openbugbounty
Openbugbounty
•added 2016/10/11 11:43 a.m.•11 views

koa.com XSS vulnerability

Vulnerable URL: http://koa.com/find-a-koa/?s=ext"map":"search":"asd" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 23304 VIP website status:| Yes Coordinated Disclosure Timeline:...

6.3AI score
SaveExploits0
Rows per page
Query Builder