171 matches found
Joyent Node.js HTTP Response Splitting Attack Vulnerability
Joyent Node.js is a suite of web application platforms built on top of Google's V8 JavaScript engine. Joyent Node.js suffers from an HTTP response splitting attack, which allows remote attackers to exploit the vulnerability to affect or tamper with the serving, caching, or parsing of web content...
Joyent SmartOS dtrace Zone Escape Integer Overflow Privilege Escalation Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Joyent SmartOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the dtrace...
Joyent SmartOS dtrace Information Disclosure Vulnerability
This vulnerability allows local attackers to disclose information on vulnerable installations of Joyent SmartOS. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the dtrace...
Joyent SmartOS Linux Zone Escape SS Exception Privilege Escalation Vulnerability
This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Joyent SmartOS. An attacker must be logged in as a user on the system in order to execute the attack. The specific flaw exists within the handling of an SS Exception. The stack segment fault handling code...
Joyent Node.js Denial of Service Vulnerability
Joyent Node.js is the United States Joyent company's set of web applications built on top of Google V8 JavaScript engine platform. A security vulnerability in Joyent Node.js allows remote attackers to conduct denial of service attacks by submitting special requests...
Joyent Node.js Geddy Directory Traversal Vulnerability
Joyent Node.js is the United States Joyent company's set of web applications built on Google V8 JavaScript engine on top of the platform. Geddy is one of the front-end framework. A directory traversal vulnerability exists in the lib/app/index.js file in Joyent Node.js Geddy 13.0.7 and earlier...
Joyent Node.js 'unicode.cc' Denial of Service Vulnerability
Joyent Node.js is the United States Joyent company's set of web applications built on top of the Google V8 JavaScript engine platform. The platform is primarily used for building highly scalable applications and writing code that can handle tens of thousands of simultaneous connections to a singl...
Joyent Node.js marked incomplete blacklist vulnerability
Joyent Node.js is the United States Joyent company's set of web applications built on Google V8 JavaScript engine on top of the platform. marked is one of the Markdown a lightweight markup language parser and compiler . An incomplete blacklist vulnerability exists in Joyent Node.js marked. A remo...
Joyent Node.js Sequelize SQL Injection Vulnerability
Joyent Node.js is the United States Joyent company's set of web applications built on Google V8 JavaScript engine on top of the platform. Sequelize is one of the database ORM object-relational mapping tool. A SQL injection vulnerability exists in Joyent Node.js Sequelize. A remote attacker can...
FreeBSD Ports: FreeBSD
The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
CVE-2012-0217
The x86-64 kernel system-call functionality in Xen 4.1.2 and earlier, as used in Citrix XenServer 6.0.2 and earlier and other products; Oracle Solaris 11 and earlier; illumos before r13724; Joyent SmartOS before 20120614T184600Z; FreeBSD before 9.0-RELEASE-p3; NetBSD 6.0 Beta and earlier; Microso...