Lucene search
+L

11 matches found

UbuntuCve
UbuntuCve
•added 2017/11/17 3:29 a.m.•25 views

CVE-2017-1000188

nodejs ejs version older than 2.5.5 is vulnerable to a Cross-site-scripting in the ejs.renderFile resulting in code injection...

6.1CVSS6.4AI score0.01233EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2017/11/17 3:00 a.m.•44 views

CVE-2017-1000189

nodejs ejs version older than 2.5.5 is vulnerable to a denial-of-service due to weak input validation in the ejs.renderFile...

7.4AI score0.02267EPSS
SaveExploits0References2
Mend
Mend
•added 2017/11/17 3:00 a.m.•6 views

CVE-2017-1000228

nodejs ejs versions older than 2.5.3 is vulnerable to remote code execution due to weak input validation in ejs.renderFile function...

10CVSS0.06328EPSS
SaveExploits1References5
Mend
Mend
•added 2017/11/17 3:00 a.m.•7 views

CVE-2017-1000189

nodejs ejs version older than 2.5.5 is vulnerable to a denial-of-service due to weak input validation in the ejs.renderFile...

8.7CVSS0.02267EPSS
SaveExploits0References6
Mend
Mend
•added 2017/11/17 3:00 a.m.•5 views

CVE-2017-1000188

nodejs ejs version older than 2.5.5 is vulnerable to a Cross-site-scripting in the ejs.renderFile resulting in code injection...

6.1CVSS0.01233EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/11/17 12:00 a.m.•4 views

CVE-2017-1000228: Improper Input Validation

nodejs ejs versions older than 2.5.3 is vulnerable to remote code execution due to weak input validation in ejs.renderFile function...

10CVSS8.6AI score0.06328EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/11/17 12:00 a.m.•5 views

CVE-2017-1000189: Improper Input Validation

nodejs ejs version older than 2.5.5 is vulnerable to a denial-of-service due to weak input validation in the ejs.renderFile...

7.5CVSS7.4AI score0.02267EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/11/17 12:00 a.m.•5 views

CVE-2017-1000188: Improper Neutralization of Input During Web Page Generation

nodejs ejs version older than 2.5.5 is vulnerable to a Cross-site-scripting in the ejs.renderFile resulting in code injection...

6.1CVSS6.9AI score0.01233EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2017/11/17 12:00 a.m.•1 views

PT-2017-10886

Name of the Vulnerable Software and Affected Versions ejs versions prior to 2.5.5 Description The issue is related to a denial-of-service caused by weak input validation in the ejs.renderFile function. Recommendations For versions prior to 2.5.5, update to version 2.5.5 or later to resolve the...

7.5CVSS0.02267EPSS
SaveExploits0References13
Positive Technologies
Positive Technologies
•added 2017/11/17 12:00 a.m.•1 views

PT-2017-10885

Name of the Vulnerable Software and Affected Versions ejs versions prior to 2.5.5 Description The issue is related to a Cross-site-scripting vulnerability in the ejs.renderFile function, which can result in code injection. Recommendations For versions prior to 2.5.5, update to version 2.5.5 or...

6.1CVSS0.01233EPSS
SaveExploits0References13
Positive Technologies
Positive Technologies
•added 2017/11/17 12:00 a.m.•1 views

PT-2017-10924

Name of the Vulnerable Software and Affected Versions ejs versions prior to 2.5.3 Description The issue is related to weak input validation in the ejs.renderFile function, which can lead to remote code execution. Recommendations For versions prior to 2.5.3, update to version 2.5.3 or later to...

10CVSS0.06328EPSS
SaveExploits1References9
Rows per page
Query Builder