Lucene search
+L

171 matches found

CNVD
CNVD
added 2016/02/23 12:00 a.m.10 views

Joyent Node.js HTTP Response Splitting Attack Vulnerability

Joyent Node.js is a suite of web application platforms built on top of Google's V8 JavaScript engine. Joyent Node.js suffers from an HTTP response splitting attack, which allows remote attackers to exploit the vulnerability to affect or tamper with the serving, caching, or parsing of web content...

7.5CVSS8.4AI score0.07013EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2016/02/18 12:00 a.m.20 views

Joyent SmartOS dtrace Zone Escape Integer Overflow Privilege Escalation Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Joyent SmartOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the dtrace...

6.9CVSS7.7AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2016/02/18 12:00 a.m.58 views

Joyent SmartOS dtrace Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose information on vulnerable installations of Joyent SmartOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the dtrace...

6.9CVSS5.9AI score
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2016/02/18 12:00 a.m.16 views

Joyent SmartOS Linux Zone Escape SS Exception Privilege Escalation Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Joyent SmartOS. An attacker must be logged in as a user on the system in order to execute the attack. The specific flaw exists within the handling of an SS Exception. The stack segment fault handling code...

6.9CVSS7.6AI score
SaveExploits0References1
CNVD
CNVD
added 2015/12/13 12:00 a.m.7 views

Joyent Node.js Denial of Service Vulnerability

Joyent Node.js is the United States Joyent company's set of web applications built on top of Google V8 JavaScript engine platform. A security vulnerability in Joyent Node.js allows remote attackers to conduct denial of service attacks by submitting special requests...

7.5CVSS8.6AI score0.05356EPSS
SaveExploits0References1
CNVD
CNVD
added 2015/09/08 12:00 a.m.10 views

Joyent Node.js Geddy Directory Traversal Vulnerability

Joyent Node.js is the United States Joyent company's set of web applications built on Google V8 JavaScript engine on top of the platform. Geddy is one of the front-end framework. A directory traversal vulnerability exists in the lib/app/index.js file in Joyent Node.js Geddy 13.0.7 and earlier...

5CVSS9.2AI score0.09385EPSS
SaveExploits1References1
CNVD
CNVD
added 2015/07/09 12:00 a.m.42 views

Joyent Node.js 'unicode.cc' Denial of Service Vulnerability

Joyent Node.js is the United States Joyent company's set of web applications built on top of the Google V8 JavaScript engine platform. The platform is primarily used for building highly scalable applications and writing code that can handle tens of thousands of simultaneous connections to a singl...

7.5CVSS6.7AI score0.02995EPSS
SaveExploits0References1
CNVD
CNVD
added 2015/01/28 12:00 a.m.11 views

Joyent Node.js marked incomplete blacklist vulnerability

Joyent Node.js is the United States Joyent company's set of web applications built on Google V8 JavaScript engine on top of the platform. marked is one of the Markdown a lightweight markup language parser and compiler . An incomplete blacklist vulnerability exists in Joyent Node.js marked. A remo...

4.3CVSS6.4AI score0.02051EPSS
SaveExploits1References1
CNVD
CNVD
added 2015/01/28 12:00 a.m.6 views

Joyent Node.js Sequelize SQL Injection Vulnerability

Joyent Node.js is the United States Joyent company's set of web applications built on Google V8 JavaScript engine on top of the platform. Sequelize is one of the database ORM object-relational mapping tool. A SQL injection vulnerability exists in Joyent Node.js Sequelize. A remote attacker can...

7.5CVSS8.7AI score0.02115EPSS
SaveExploits1References1
OpenVAS
OpenVAS
added 2012/08/10 12:00 a.m.39 views

FreeBSD Ports: FreeBSD

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

7.2CVSS6.8AI score0.37465EPSS
SaveExploits8
NVD
NVD
added 2012/06/12 10:55 p.m.27 views

CVE-2012-0217

The x86-64 kernel system-call functionality in Xen 4.1.2 and earlier, as used in Citrix XenServer 6.0.2 and earlier and other products; Oracle Solaris 11 and earlier; illumos before r13724; Joyent SmartOS before 20120614T184600Z; FreeBSD before 9.0-RELEASE-p3; NetBSD 6.0 Beta and earlier; Microso...

7.2CVSS6.2AI score0.37465EPSS
SaveExploits8References23
Rows per page
Query Builder