CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

5864 matches found

Tenable Nessus•added 2025/10/07 12:00 a.m.•16 views

Unity Linux 20.1070e Security Update: nodejs (UTSA-2025-680626)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-680626 advisory. Due to the formatting logic of the console.table function it was not safe to allow user controlled input to be passed to the properties parameter while simultaneousl...

8.2CVSS6.4AI score0.21514EPSS

SaveExploits0References4

Cvelist•added 2025/10/06 3:54 p.m.•39 views

CVE-2025-61687 FlowiseAI/Flosise has File Upload vulnerability

Flowise is a drag & drop user interface to build a customized large language model flow. A file upload vulnerability in version 3.0.7 of FlowiseAI allows authenticated users to upload arbitrary files without proper validation. This enables attackers to persistently store malicious Node.js web...

8.3CVSS0.11758EPSS

SaveExploits2References9

BDU FSTEC•added 2025/10/06 12:00 a.m.•23 views

Node.js Confidential Data Access

The vulnerability of the Node.js software platform is related to its dependence on machine-dependent data representation. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...

6.5CVSS7.5AI score0.00407EPSS

SaveExploits0References7Affected Software2

Tenable Nessus•added 2025/10/06 12:00 a.m.•14 views

RockyLinux 10 : nodejs22 (RLSA-2025:8493)

The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:8493 advisory. nodejs: Remote Crash via SignTraits::DeriveBits in Node.js CVE-2025-23166 Tenable has extracted the preceding description block directly from the...

7.5CVSS6.9AI score0.00817EPSS

SaveExploits0References5

Redos•added 2025/10/06 12:00 a.m.•27 views

ROS-20251006-11

A vulnerability in the permissions model of the Node.js software platform is related to flaws in the processing of HTTP requests. Exploitation of the vulnerability could allow a remote attacker to bypass existing security restrictions and send unauthorized requests. existing security restrictions...

7.5CVSS6.7AI score0.00817EPSS

SaveExploits1