5611 matches found
nodejs-dot-prop: prototype pollution
A prototype pollution flaw was found in nodejs-dot-prop. The function set could be tricked into adding or modifying properties of Object.prototype using any of the constructor, prototype, or proto paths. The highest threat from this vulnerability is to data confidentiality and integrity as well a...
RHEL 8 : nodejs:12 (RHSA-2020:4903)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4903 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The...
new module: nodejs:14
This enhancement update adds the nodejs:14 module to AlmaLinux BZ1815402 For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section...
new module: nodejs:14
An update is available for nodejs-nodemon, nodejs-packaging. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list This enhancement update adds the nodejs:14 module to...
PT-2020-1221
Name of the Vulnerable Software and Affected Versions AlmaLinux affected versions not specified Description This issue concerns an enhancement update that adds the nodejs:14 module to AlmaLinux. For detailed information on changes in this release, refer to the AlmaLinux Release Notes...
Fedora: Security Advisory for nodejs (FEDORA-2020-74bf23e1f1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora: Security Advisory for nodejs (FEDORA-2020-c605353480)
The remote host is missing an update for the SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
@zaptic-external/saml (2.0.7), dssp-nodejs (0.3.2) +5 more potentially affected by unknown CVE via xml-crypto (>=1.0.2, <=1.4.0)
xml-crypto NPM version =1.0.2, =0.2.1, =0.13.0, =0.15.0 - vrkkpa-samlp 3.4.3-sf1.1 Source cves: unknown CVE Source advisory: GHSA-C27R-X354-4M68...
CVE-2020-5977
NVIDIA GeForce Experience, all versions prior to 3.20.5.70, contains a vulnerability in NVIDIA Web Helper NodeJS Web Server in which an uncontrolled search path is used to load a node module, which may lead to code execution, denial of service, escalation of privileges, and information disclosure...
CVE-2020-5977
NVIDIA GeForce Experience, all versions prior to 3.20.5.70, contains a vulnerability in NVIDIA Web Helper NodeJS Web Server in which an uncontrolled search path is used to load a node module, which may lead to code execution, denial of service, escalation of privileges, and information disclosure...
CVE-2020-5977
CVE-2020-5977 details (NVIDIA GeForce Experience Windows) : A vulnerability in the NVIDIA Web Helper NodeJS Web Server exists in GeForce Experience all versions before 3.20.5.70. The issue stems from an uncontrolled search path used to load a Node.js module, enabling a local attacker to potential...
Nvidia Warns Gamers of Severe GeForce Experience Flaws
Nvidia, which makes gaming-friendly graphics processing units GPUs, has issued fixes for two high-severity flaws in the Windows version of its GeForce Experience software. GeForce Experience is a supplemental application to the GeForce GTX graphics card — it keeps users’ drivers up-to-date,...
PT-2020-18867
Name of the Vulnerable Software and Affected Versions NVIDIA GeForce Experience versions prior to 3.20.5.70 Description The issue concerns an uncontrolled search path used to load a node module in the NVIDIA Web Helper NodeJS Web Server, potentially leading to code execution, denial of service,...
CVE-2020-5977: Untrusted Search Path
NVIDIA GeForce Experience, all versions prior to 3.20.5.70, contains a vulnerability in NVIDIA Web Helper NodeJS Web Server in which an uncontrolled search path is used to load a node module, which may lead to code execution, denial of service, escalation of privileges, and information disclosure...
Oracle Linux 8 : nodejs:12 (ELSA-2020-4272)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-4272 advisory. nodejs 1:12.18.4-2 - Resolves: RHBZ1883966 - nodejs-devel not installable due to missing brotli - Some spec fixes 12.18.4-1 - Rebase to 12.18.4...
nodejs-dot-prop: prototype pollution
A prototype pollution flaw was found in nodejs-dot-prop. The function set could be tricked into adding or modifying properties of Object.prototype using any of the constructor, prototype, or proto paths. The highest threat from this vulnerability is to data confidentiality and integrity as well a...
RHEL 8 : nodejs:12 (RHSA-2020:4272)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4272 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The...
Photon OS 3.0: Nodejs PHSA-2020-3.0-0150
An update of the nodejs package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-3.0-0150. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid14148...
Photon OS 2.0: Nodejs PHSA-2020-2.0-0288
An update of the nodejs package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2020-2.0-0288. The text itself is copyright C VMware, Inc. include'compat.inc'; if description scriptid14144...
OPENSUSE-SU-2020:1660-1 Security update for nodejs10
This update for nodejs10 fixes the following issues: - nodejs10 was updated to 10.22.1 LTS: - CVE-2020-8252: Fixed a buffer overflow in realpath bsc1176589. - CVE-2020-15095: Fixed an information leak through log files bsc1173937. - Explicitly add -fno-strict-aliasing to CFLAGS to fix compilation...