406 matches found
EUVD-2024-36333
Malicious code in bioql PyPI...
EUVD-2024-19624
Malicious code in bioql PyPI...
EUVD-2023-34962
Malicious code in bioql PyPI...
EUVD-2024-19625
Malicious code in bioql PyPI...
EUVD-2023-34963
Malicious code in bioql PyPI...
EUVD-2023-34965
Malicious code in bioql PyPI...
EUVD-2023-28002
Malicious code in bioql PyPI...
EUVD-2022-6905
Malicious code in bioql PyPI...
EUVD-2023-43064
Malicious code in bioql PyPI...
EUVD-2023-34968
Malicious code in bioql PyPI...
EUVD-2021-31364
Malicious code in bioql PyPI...
EUVD-2023-34969
Malicious code in bioql PyPI...
EUVD-2025-3111
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2019-5737
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Node.js including 6.x before 6.17.0, 8.x before 8.15.1, 10.x before 10.15.2, and 11.x before 11.10.1, an attacker can cause a Denial of Service DoS by...
Linux Distros Unpatched Vulnerability : CVE-2018-12123
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Hostname spoofing in URL parser for javascript protocol: If a Node.js application is...
Linux Distros Unpatched Vulnerability : CVE-2024-22018
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability has been identified in Node.js, affecting users of the experimental permission model when the --allow-fs-read flag is used. This flaw arises fro...
CVE-2025-54798
tmp is a temporary file and directory creator for node.js. In versions 0.2.3 and below, tmp is vulnerable to an arbitrary temporary file / directory write via symbolic link dir parameter. This is fixed in version 0.2.4...
CVE-2025-54798 tmp does not restrict arbitrary temporary file / directory write via symbolic link `dir` parameter
tmp is a temporary file and directory creator for node.js. In versions 0.2.3 and below, tmp is vulnerable to an arbitrary temporary file / directory write via symbolic link dir parameter. This is fixed in version 0.2.4...
CVE-2025-8522
CVE-2025-8522 affects givanz Vvvebjs up to version 2.0.4, where a vulnerability in the node.js component allows path traversal via the File argument in the file /save.php. Remote exploitation is possible with high attack complexity; exploitability is reported as difficult, and a public exploit ex...
RHEL 9 : nodejs:22 (RHSA-2025:11802)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:11802 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixe...