Lucene search
K

7 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.5 views

EUVD-2019-0243

Malware in sbrugna...

9.3CVSS8AI score0.01752EPSS
Exploits0References5
OSV
OSV
added 2025/07/29 1:40 p.m.5 views

RLSA-2025:8468 Important: nodejs:20 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: nodejs: Remote Crash via SignTraits::DeriveBits in Node.js CVE-2025-23166 For more details about the security issues, including the impact, a CVSS...

7.5CVSS7.8AI score0.00763EPSS
Exploits1References4
CNNVD
CNNVD
added 2025/07/23 12:0 a.m.3 views

编号撤回

Bun is a Bun open source all-in-one toolkit for JavaScript and TypeScript applications. This CVE number has been withdrawn...

6.5AI score
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 5:31 a.m.8 views

CVE-2023-29198

Electron is a framework which lets you write cross-platform desktop applications using JavaScript, HTML and CSS. Electron apps using contextIsolation and contextBridge are affected. This is a context isolation bypass, meaning that code running in the main world context in the renderer can reach...

8.5CVSS6.7AI score0.0049EPSS
Exploits0References1
AlmaLinux
AlmaLinux
added 2025/05/13 12:0 a.m.6 views

Moderate: nodejs:20 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: c-ares: c-ares has a use-after-free in readanswers CVE-2025-31498 For more details about the security issues, including the impact, a CVSS score,...

8.3CVSS7.3AI score0.00523EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2021/06/10 12:0 a.m.5 views

The vulnerability of the modular library for simplifying the development of JavaScript or AJAX-based applications and websites allows attackers to compromise the confidentiality, integrity, and accessibility of protected information due to improper coding or the concealment of output data.

The vulnerability of the modular library used for simplifying the development of JavaScript- or AJAX-based applications and websites in the Dojo Toolkit is related to incorrect coding or the concealment of output data. Exploiting this vulnerability can allow an attacker to compromise the...

9.8CVSS7.7AI score0.02611EPSS
Exploits2References6Affected Software3
NVD
NVD
added 2009/06/10 6:0 p.m.19 views

CVE-2009-1696

WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 uses predictable random numbers in JavaScript applications, which makes it easier for remote web servers to track the behavior of a Safari user during a session...

5CVSS7.2AI score0.02335EPSS
Exploits3References12
Rows per page
Query Builder