Lucene search
+L

8220 matches found

Amazon
Amazon
added 2025/06/10 12:0 a.m.9 views

Important: nodejs22

Issue Overview: Corrupted pointer in node::fs::ReadFileUtf8const FunctionCallbackInfo& args when args0 is a string, resulting in an unrecoverable memory leak on every call. Repeated use can cause unbounded memory growth, leading to a denial of service. Info:...

7.5CVSS9.5AI score0.00803EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2025/06/10 12:0 a.m.9 views

Fortinet FortiWeb Privilege escalation in GUI websocket module (FG-IR-25-006)

The version of FortiWeb installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-25-006 advisory. - An Improper Privilege Management vulnerability CWE-269 affecting Fortinet FortiOS version 7.6.0 through 7.6.1, 7.4.0 through...

7.2CVSS5.6AI score0.00712EPSS
SaveExploits0References2
Amazon
Amazon
added 2025/06/10 12:0 a.m.9 views

Important: nodejs20

Issue Overview: Corrupted pointer in node::fs::ReadFileUtf8const FunctionCallbackInfo& args when args0 is a string, resulting in an unrecoverable memory leak on every call. Repeated use can cause unbounded memory growth, leading to a denial of service. Info:...

7.5CVSS6.7AI score0.00803EPSS
SaveExploits1
IBM Security Bulletins
IBM Security Bulletins
added 2025/06/06 3:4 p.m.16 views

Security Bulletin: IBM Cloud Pak for Data is vulnerable to Node.js dicer module denial of service (CVE-2022-24434)

Summary Potential vulnerabilities in Node.js dicer module CVE-2022-24434 has been identified that may affect IBM Cloud Pak for Data. Vulnerability Details CVEID:CVE-2022-24434 DESCRIPTION: This affects all versions of package dicer. A malicious attacker can send a modified form to server, and cra...

7.5CVSS6.4AI score0.03425EPSS
SaveExploits2Affected Software1
OSV
OSV
added 2025/06/05 10:4 a.m.4 views

RHSA-2025:8506 Red Hat Security Advisory: nodejs:22 security update

Bulletin has no description...

7.5CVSS6.2AI score0.00803EPSS
SaveExploits0References13
Tenable Nessus
Tenable Nessus
added 2025/06/05 12:0 a.m.17 views

RHEL 10 : nodejs22 (RHSA-2025:8493)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:8493 advisory. Node.js is a platform built on Chrome's JavaScript runtime \ for easily building fast, scalable network applications. \ Node.js uses an...

7.5CVSS7AI score0.00803EPSS
SaveExploits0References5
Tenable Nessus
Tenable Nessus
added 2025/06/05 12:0 a.m.6 views

RHEL 10 : nodejs22 (RHSA-2025:7502)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:7502 advisory. Node.js is a platform built on Chrome's JavaScript runtime \ for easily building fast, scalable network applications. \ Node.js uses an event-driven...

8.3CVSS7.3AI score0.00577EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2025/06/04 1:51 p.m.10 views

nodejs: Improper HTTP Header Termination in Node.js 20 Enables Request Smuggling

A flaw was found in the HTTP parser of Node.js. This vulnerability allows attackers to perform request smuggling and bypass proxy-based access controls via improperly terminated HTTP/1 headers using \r\n\rX instead of the standard \r\n\r\n...

6.5CVSS7.3AI score0.00503EPSS
SaveExploits1References5
RedHat Linux
RedHat Linux
added 2025/06/04 1:51 p.m.17 views

Important: Red Hat Security Advisory: nodejs:20 security update

An update for the nodejs:20 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

7.5CVSS7AI score0.00803EPSS
SaveExploits1References4
RedHat Linux
RedHat Linux
added 2025/06/04 1:51 p.m.5 views

nodejs: Remote Crash via SignTraits::DeriveBits() in Node.js

A flaw was found in Node.js, specifically in the C++ method SignTraits::DeriveBits. This vulnerability can allow a remote attacker to crash the Node.js runtime via untrusted input, triggering an exception in a background thread...

7.5CVSS7.2AI score0.00803EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2025/06/04 11:35 a.m.8 views

nodejs: Memory Leak in Node.js ReadFileUtf8 Binding Leading to DoS

A flaw was found in the ReadFileUtf8 internal binding of Node.js. This vulnerability can allow an attacker to cause an application denial of service via repeated file read operations that trigger an unrecoverable memory leak due to a corrupted pointer in the underlying file system binding...

3.7CVSS6.8AI score0.00533EPSS
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2025/06/04 11:35 a.m.10 views

Important: Red Hat Security Advisory: nodejs:22 security update

An update for the nodejs:22 module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

7.5CVSS7AI score0.00803EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2025/06/04 11:35 a.m.5 views

nodejs: Remote Crash via SignTraits::DeriveBits() in Node.js

A flaw was found in Node.js, specifically in the C++ method SignTraits::DeriveBits. This vulnerability can allow a remote attacker to crash the Node.js runtime via untrusted input, triggering an exception in a background thread...

7.5CVSS7.2AI score0.00803EPSS
SaveExploits0References5
OSV
OSV
added 2025/06/04 10:3 a.m.5 views

RHSA-2025:8493 Red Hat Security Advisory: nodejs22 security update

Bulletin has no description...

7.5CVSS6.2AI score0.00803EPSS
SaveExploits0References12
OSV
OSV
added 2025/06/04 10:3 a.m.3 views

RHSA-2025:8468 Red Hat Security Advisory: nodejs:20 security update

Bulletin has no description...

7.5CVSS6.3AI score0.00803EPSS
SaveExploits1References16
RedHat Linux
RedHat Linux
added 2025/06/04 7:44 a.m.14 views

Important: Red Hat Security Advisory: nodejs22 security update

An update for nodejs22 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

7.5CVSS7AI score0.00803EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2025/06/04 12:14 a.m.8 views

CVE-2024-57783

The desktop application in Dot through 0.9.3 allows XSS and resultant command execution because user input and LLM output are appended to the DOM with innerHTML in render.js, and because the Electron window can access Node.js APIs...

8.1CVSS6.3AI score0.00192EPSS
SaveExploits0References1
OSV
OSV
added 2025/06/04 12:0 a.m.13 views

ALSA-2025:8514 Important: nodejs:20 security update

Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. Security Fixes: nodejs: Remote Crash via SignTraits::DeriveBits in Node.js CVE-2025-23166 For more details about the security issues, including the impact, a CVSS...

7.5CVSS7.3AI score0.00803EPSS
SaveExploits0References4
Oracle linux
Oracle linux
added 2025/06/04 12:0 a.m.50 views

nodejs:22 security update

nodejs 1:22.16.0-1 - Update to 22.16.0 Resolves: RHEL-89600 RHEL-92872 RHEL-92420...

7.5CVSS7.1AI score0.00803EPSS
SaveExploits0
Oracle linux
Oracle linux
added 2025/06/04 12:0 a.m.10 views

nodejs:20 security update

nodejs 1:20.19.2-1 - Update to version 20.19.2 Resolves: RHEL-92865 RHEL-88876 RHEL-91597 nodejs-nodemon nodejs-packaging...

7.5CVSS7.1AI score0.00803EPSS
SaveExploits0
Rows per page
Query Builder