CVE-2015-9286: Improper Neutralization of Input During Web Page Generation

Controllers.outgoing in controllers/index.js in NodeBB before 0.7.3 has outgoing XSS...

PT-2019-7245

Name of the Vulnerable Software and Affected Versions NodeBB versions prior to 0.7.3 Description The issue is related to outgoing XSS in the controllers/index.js file. Recommendations For versions prior to 0.7.3, update to version 0.7.3 or later to resolve the issue...

Unspecified Vulnerability in Total.js Platform

Total.js Platform is a suite of JavaScript Web platforms. The platform includes Total.js framework, Total.js apps, SQL Agent and NoSQL embedded DB. A security vulnerability exists in the index.js file in versions of Total.js Platform prior to 3.2.3. No details of the vulnerability are provided at...

Path Traversal

total.js is vulnerable to path traversal attacks. The vulnerability exists in index.js where req.url is insufficiently sanitized, allowing path traversal attacks...

CVE-2019-8903

index.js in Total.js Platform before 3.2.3 allows path traversal...

CVE-2019-8903

index.js in Total.js Platform before 3.2.3 allows path traversal...

CVE-2019-8903

index.js in Total.js Platform before 3.2.3 allows path traversal...

CVE-2019-8903: Improper Limitation of a Pathname to a Restricted Directory

index.js in Total.js Platform before 3.2.3 allows path traversal...

Denial Of Service (DoS)

url-relative is vulnerable to denial of service DoS. The library does not check the to and from values in the function urlRelative in index.js, preventing the function from returning when a user provides the same values for to and from...

Code injection

translate man before 2018-08-21 has XSS via containers/outputBox/outputBox.vue and store/index.js...

CVE-2018-17046

translate man before 2018-08-21 has XSS via containers/outputBox/outputBox.vue and store/index.js...

PT-2018-13860

Name of the Vulnerable Software and Affected Versions translate man versions prior to 2018-08-21 Description The issue is related to a security problem where there is XSS via certain files, specifically containers/outputBox/outputBox.vue and store/index.js. Recommendations For versions prior to...

CVE-2018-17046: Improper Neutralization of Input During Web Page Generation

translate man before 2018-08-21 has XSS via containers/outputBox/outputBox.vue and store/index.js...

CVE-2018-11647

index.js in oauth2orize-fprm before 0.2.1 has XSS via a crafted URL...

CVE-2018-11647

index.js in oauth2orize-fprm before 0.2.1 has XSS via a crafted URL...

CVE-2018-11647: Improper Neutralization of Input During Web Page Generation

index.js in oauth2orize-fprm before 0.2.1 has XSS via a crafted URL...

AWS Lambda parser is vulnerable to Regular Expression Denial of Service

index.js in the aws-lambda-multipart-parser NPM package before 0.1.2 has a Regular Expression Denial of Service ReDoS issue via a crafted multipart/form-data boundary string...

GHSA-6JQP-J69Q-PM62 AWS Lambda parser is vulnerable to Regular Expression Denial of Service

index.js in the aws-lambda-multipart-parser NPM package before 0.1.2 has a Regular Expression Denial of Service ReDoS issue via a crafted multipart/form-data boundary string...

CVE-2018-7560

index.js in the Anton Myshenin aws-lambda-multipart-parser NPM package before 0.1.2 has a Regular Expression Denial of Service ReDoS issue via a crafted multipart/form-data boundary string...

CVE-2018-7560

index.js in the Anton Myshenin aws-lambda-multipart-parser NPM package before 0.1.2 has a Regular Expression Denial of Service ReDoS issue via a crafted multipart/form-data boundary string...