13174 matches found
Security Bulletin: A security vulnerability in Node.js affects IBM Cloud Automation Manager
Summary A security vulnerability in Node.js affects IBM Cloud Automation Manager. Vulnerability Details CVEID:CVE-2021-23840 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by an integer overflow in CipherUpdate. By sending an overly long argument, an attacker could exploit this...
K000134602: Node.js vulnerabilities CVE-2023-23918 and CVE-2023-23920
Security Advisory Description CVE-2023-23918 A privilege escalation vulnerability exists in Node.js 19.6.1, 18.14.1, 16.19.1 and 14.21.3 that made it possible to bypass the experimental Permissions https: //nodejs. org/api/permissions.html feature in Node.js and access non authorized modules by...
CVE-2023-32313: Improper Neutralization of Special Elements in Output Used by a Downstream Component
vm2 is a sandbox that can run untrusted code with Node's built-in modules. In versions 3.9.17 and lower of vm2 it was possible to get a read-write reference to the node inspect method and edit options for console.log. As a result a threat actor can edit options for the console.log command. This...
AlmaLinux 9 : nodejs and nodejs-nodemon (ALSA-2023:2655)
The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2023:2655 advisory. - This affects versions of the package http-cache-semantics before 4.1.1. The issue can be exploited via malicious request header values sent to a server,...
RHEL 9 : nodejs and nodejs-nodemon (RHSA-2023:2655)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:2655 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language. The...
AlmaLinux 9 : nodejs:18 (ALSA-2023:2654)
The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2023:2654 advisory. glob-parent: Regular Expression Denial of Service CVE-2021-35065 c-ares: buffer overflow in configsortlist due to missing string length check CVE-2022-490...
Ubuntu 16.04 ESM / 18.04 LTS / 20.04 ESM : css-what vulnerabilities (USN-6065-1)
The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 ESM host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6065-1 advisory. It was discovered that css-what incorrectly handled certain inputs. If a user or an automated system were tricked into opening a...
IBM Cognos Analytics Multiple Vulnerabilities (6986505)
The version of IBM Cognos Analytics installed on the remote host is 11.1.x prior to 11.1.7 Fix Pack 7 or 11.2.x prior to 11.2.4 FP1. It is, therefore, affected by multiple vulnerabilities, including the following: - GNOME libxml2 could allow a remote attacker to execute arbitrary code on the...
GHSA-P58X-7733-VP9M n8n Directory Traversal vulnerability
The n8n package prior to version 0.216.1 for Node.js allows Directory Traversal...
GHSA-R9XW-P7WJ-W792 n8n Information Disclosure vulnerability
The n8n package prior to 0.216.1 for Node.js allows Information Disclosure...
n8n-nodes-accelo (>=0.1.0, <=0.1.9), n8n-nodes-closeio (0.1.0) +10 more potentially affected by CVE-2023-27562 via n8n (>=0.81.0, <=0.214.5)
n8n NPM version =0.81.0, =0.1.0, =0.18.0, =0.1.0, =0.1.0, =0.2.14, =0.1.0, =0.1.0, =0.0.2, =0.0.2, =1.1.3 Source cves: CVE-2023-27562 Source advisory: OSV:GHSA-P58X-7733-VP9M...
n8n Privilege Escalation vulnerability
The n8n package prior to 0.216.1 for Node.js allows Escalation of Privileges...
n8n Information Disclosure vulnerability
The n8n package prior to 0.216.1 for Node.js allows Information Disclosure...
n8n Directory Traversal vulnerability
The n8n package prior to version 0.216.1 for Node.js allows Directory Traversal...
n8n-nodes-accelo (>=0.1.0, <=0.1.9), n8n-nodes-closeio (0.1.0) +10 more potentially affected by CVE-2023-27564 via n8n (>=0.81.0, <=0.214.5)
n8n NPM version =0.81.0, =0.1.0, =0.18.0, =0.1.0, =0.1.0, =0.2.14, =0.1.0, =0.1.0, =0.0.2, =0.0.2, =1.1.3 Source cves: CVE-2023-27564 Source advisory: OSV:GHSA-R9XW-P7WJ-W792...
n8n-nodes-accelo (>=0.1.0, <=0.1.9), n8n-nodes-closeio (0.1.0) +10 more potentially affected by CVE-2023-27563 via n8n (>=0.81.0, <=0.214.5)
n8n NPM version =0.81.0, =0.1.0, =0.18.0, =0.1.0, =0.1.0, =0.2.14, =0.1.0, =0.1.0, =0.0.2, =0.0.2, =1.1.3 Source cves: CVE-2023-27563 Source advisory: OSV:GHSA-97CP-MR4M-9MCF...
GHSA-97CP-MR4M-9MCF n8n Privilege Escalation vulnerability
The n8n package prior to 0.216.1 for Node.js allows Escalation of Privileges...
CVE-2023-27564
The n8n package 0.218.0 for Node.js allows Information Disclosure...