Lucene search
K

4389 matches found

OpenVAS
OpenVAS
added 2017/12/04 12:0 a.m.13 views

Fedora Update for nodejs-brace-expansion FEDORA-2017-2522df3526

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5AI score
Exploits0References2
Fedora
Fedora
added 2017/12/01 3:45 a.m.8 views

[SECURITY] Fedora 26 Update: nodejs-balanced-match-0.4.2-4.fc26

Match balanced character pairs, like "" and ""...

3.6AI score
Exploits0
Github Security Blog
Github Security Blog
added 2017/11/30 11:15 p.m.43 views

ejs is vulnerable to remote code execution due to weak input validation

nodejs ejs versions older than 2.5.3 is vulnerable to remote code execution due to weak input validation in ejs.renderFile function...

10CVSS9.5AI score0.06328EPSS
Exploits1References4Affected Software1
OpenVAS
OpenVAS
added 2017/11/23 12:0 a.m.27 views

Fedora Update for nodejs FEDORA-2017-5c17b4934f

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS7.7AI score0.08144EPSS
Exploits0References2
CNVD
CNVD
added 2017/11/22 12:0 a.m.0 views

npm/KyleRoss windows-cpu command injection vulnerability

npm/KyleRoss windows-cpu is an American software developer KyleRoss developed a set of CPU monitoring program for use on the Windows platform. A command injection vulnerability exists in npm/KyleRoss windows-cpu. An attacker can exploit the vulnerability to execute code as a Node.js user...

9.8CVSS8AI score0.04236EPSS
Exploits1References1
RedhatCVE
RedhatCVE
added 2017/11/20 10:50 a.m.22 views

CVE-2017-1000189

nodejs ejs version older than 2.5.5 is vulnerable to a denial-of-service due to weak input validation in the ejs.renderFile...

7.5CVSS3.3AI score0.02267EPSS
Exploits0References2
NVD
NVD
added 2017/11/17 3:29 a.m.23 views

CVE-2017-1000189

nodejs ejs version older than 2.5.5 is vulnerable to a denial-of-service due to weak input validation in the ejs.renderFile...

7.5CVSS7.4AI score0.02267EPSS
Exploits0References2
NVD
NVD
added 2017/11/17 3:29 a.m.12 views

CVE-2017-1000188

nodejs ejs version older than 2.5.5 is vulnerable to a Cross-site-scripting in the ejs.renderFile resulting in code injection...

6.1CVSS6.4AI score0.01233EPSS
Exploits0References2
UbuntuCve
UbuntuCve
added 2017/11/17 3:29 a.m.20 views

CVE-2017-1000189

nodejs ejs version older than 2.5.5 is vulnerable to a denial-of-service due to weak input validation in the ejs.renderFile...

7.5CVSS7.1AI score0.02267EPSS
Exploits0References2
Prion
Prion
added 2017/11/17 3:29 a.m.17 views

Input validation

nodejs ejs versions older than 2.5.3 is vulnerable to remote code execution due to weak input validation in ejs.renderFile function...

10CVSS9.7AI score0.06328EPSS
Exploits1References2Affected Software1
Prion
Prion
added 2017/11/17 3:29 a.m.11 views

Cross site scripting

nodejs ejs version older than 2.5.5 is vulnerable to a Cross-site-scripting in the ejs.renderFile resulting in code injection...

4.3CVSS6.3AI score0.01233EPSS
Exploits0References2Affected Software1
OSV
OSV
added 2017/11/17 3:29 a.m.18 views

CVE-2017-1000228

nodejs ejs versions older than 2.5.3 is vulnerable to remote code execution due to weak input validation in ejs.renderFile function...

9.8CVSS7.7AI score
Exploits0References2
OSV
OSV
added 2017/11/17 3:29 a.m.1 views

UBUNTU-CVE-2017-1000189

nodejs ejs version older than 2.5.5 is vulnerable to a denial-of-service due to weak input validation in the ejs.renderFile...

7.5CVSS7.1AI score0.02267EPSS
Exploits0References3
NVD
NVD
added 2017/11/17 3:29 a.m.31 views

CVE-2017-1000228

nodejs ejs versions older than 2.5.3 is vulnerable to remote code execution due to weak input validation in ejs.renderFile function...

10CVSS9.8AI score0.06328EPSS
Exploits1References2
OSV
OSV
added 2017/11/17 3:29 a.m.15 views

CVE-2017-1000188

nodejs ejs version older than 2.5.5 is vulnerable to a Cross-site-scripting in the ejs.renderFile resulting in code injection...

6.1CVSS7.1AI score
Exploits0References2
OSV
OSV
added 2017/11/17 3:29 a.m.16 views

CVE-2017-1000189

nodejs ejs version older than 2.5.5 is vulnerable to a denial-of-service due to weak input validation in the ejs.renderFile...

7.5CVSS6.6AI score
Exploits0References2
Cvelist
Cvelist
added 2017/11/17 3:0 a.m.22 views

CVE-2017-1000189

nodejs ejs version older than 2.5.5 is vulnerable to a denial-of-service due to weak input validation in the ejs.renderFile...

7.4AI score0.02267EPSS
Exploits0References2
Cvelist
Cvelist
added 2017/11/17 3:0 a.m.26 views

CVE-2017-1000228

nodejs ejs versions older than 2.5.3 is vulnerable to remote code execution due to weak input validation in ejs.renderFile function...

9.8AI score0.06328EPSS
Exploits1References2
CVE
CVE
added 2017/11/17 3:0 a.m.50 views

CVE-2017-1000188

CVE-2017-1000188 relates to nodejs-ejs: versions older than 2.5.5 are susceptible to a Cross-site Scripting (XSS) vulnerability in ejs.renderFile(), which can lead to code injection. This risk is described across multiple sources in the provided dataset. The available documents specify the vulner...

6.1CVSS6.3AI score0.01233EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2017/11/17 3:0 a.m.17 views

CVE-2017-1000188

nodejs ejs version older than 2.5.5 is vulnerable to a Cross-site-scripting in the ejs.renderFile resulting in code injection...

6.4AI score0.01233EPSS
Exploits0References2
Rows per page
Query Builder