Joyent SmartOS dtrace Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose information on vulnerable installations of Joyent SmartOS. User interaction is required to exploit this vulnerability in that the target must open a malicious file. The specific flaw exists within the dtrace implementation in SmartOS. A functi...

Joyent SmartOS dtrace Zone Escape Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Joyent SmartOS. User interaction is required to exploit this vulnerability in that the target must open a malicious file. The specific flaw exists within the dtrace implementation in SmartOS. A meth...

Joyent Smart Data Center Docker API Zone Escape Privilege Escalation Vulnerability

This vulnerability allows local attackers to execute arbitrary code on vulnerable installations of Joyent Smart Data Center. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within a Docker...

Joyent SmartOS Local Information Disclosure Vulnerability

Joyent SmartOS is a set of open source operating system from Joyent, USA. A local information disclosure vulnerability exists in Joyent SmartOS, which can be exploited by attackers to obtain sensitive information...

Joyent Node.js npm Information Disclosure Vulnerability

Joyent Node.js is the United States Joyent company's set of web applications built on Google V8 JavaScript engine on top of the platform. npm is one of the package management and distribution tools . An information disclosure vulnerability exists in the CLI of npm versions prior to 2.15.1 and 3.x...

Joyent SmartOS dtrace Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose information on vulnerable installations of Joyent SmartOS. User interaction is required to exploit this vulnerability in that the target must open a malicious file. The specific flaw exists within the dtrace implementation in SmartOS. A functi...

Joyent Node.js handlebar command injection vulnerability

Joyent Node.js is a web application platform built on top of Google's V8 JavaScript engine. A security vulnerability exists in the Joyent Node.js handlebar, which allows remote attackers to submit special requests for command injection due to the lack of quotes in program properties...

Joyent Node.js validator security bypass vulnerability (CNVD-2016-02545)

Joyent Node.js is a web application platform built on top of Google's V8 JavaScript engine. A security vulnerability in Joyent Node.js validator allows remote attackers to bypass filters by submitting special input...

Joyent Node.js validator security bypass vulnerability (CNVD-2016-02546)

Joyent Node.js is a web application platform built on top of Google's V8 JavaScript engine. A security vulnerability in Joyent Node.js validator allows remote attackers to bypass filters by submitting special input...

Joyent Node.js mustache command injection vulnerability

Joyent Node.js is a web application platform built on top of Google's V8 JavaScript engine. A security vulnerability in Joyent Node.js mustachec allows remote attackers to submit special requests for command injection due to the lack of quotes in program properties...

Joyent Node.js ms Denial of Service Vulnerability

Joyent Node.js is a web application platform built on top of Google's V8 JavaScript engine. A denial of service vulnerability exists in Joyent Node.js ms due to the program failing to properly parse long version strings. This allows remote attackers to conduct denial of service attacks by...

Joyent Node.js UglifyJS Security Bypass Vulnerability

Joyent Node.js is a web application platform built on top of Google's V8 JavaScript engine. A security vulnerability in Joyent Node.js UglifyJS allows remote attackers to alter functionality using specially crafted Javascript files, as the program fails to properly handle Non-Boolean comparisons...

Joyent Node.js serve-index cross-site scripting vulnerability

Joyent Node.js is a web application platform built on top of Google's V8 JavaScript engine. A cross-site scripting vulnerability exists in the Joyent Node.js serve-index, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used to obtai...

Joyent Node.js marked denial of service vulnerability

Joyent Node.js is a web application platform built on top of Google's V8 JavaScript engine. marked is a Markdown parser and compiler. A denial of service vulnerability exists in Joyent Node.js marked, which allows remote attackers to conduct denial of service attacks by submitting a specially...

Joyent Node.js send ROOT directory discovery vulnerability

Joyent Node.js is a web application platform built on top of Google's V8 JavaScript engine. A security vulnerability in Joyent Node.js send allows remote attackers to submit a special request to discover the root directory...

Joyent Node.js semver denial of service vulnerability

Joyent Node.js is a web application platform built on top of Google's V8 JavaScript engine. semver is a semantic version control specification module in npm. A denial of service vulnerability exists in Joyent Node.js semver, where the program fails to properly parse long version strings, allowing...

Joyent Node.js tar Sensitive Information Disclosure Vulnerability

Joyent Node.js is a web application platform built on top of Google's V8 JavaScript engine. A security vulnerability in the Joyent Node.js tar allows remote attackers to overwrite and extract targets outside of a specific directory via a symbolic link attack...

Joyent Node.js validator security bypass vulnerability (CNVD-2016-02547)

Joyent Node.js is a web application platform built on top of Google's V8 JavaScript engine. A security vulnerability in Joyent Node.js validator allows remote attackers to bypass filters by submitting special input...

Joyent Node.js validator security bypass vulnerability

Joyent Node.js is a web application platform built on top of Google's V8 JavaScript engine. A security vulnerability in Joyent Node.js validator allows remote attackers to bypass filters by submitting special input...

Node.js HTTP Request Smuggling Vulnerability

Joyent Node.js is the United States Joyent company's set of web applications built on top of the Google V8 JavaScript engine platform. The platform is primarily used for building highly scalable applications and writing code that can handle tens of thousands of simultaneous connections to a singl...