4 matches found
Cross site request forgery (csrf)
Node.js 0.12.x before 0.12.9, 4.x before 4.2.3, and 5.x before 5.1.1 does not ensure the availability of a parser for each HTTP socket, which allows remote attackers to cause a denial of service uncaughtException and service outage via a pipelined HTTP request...
CVE-2015-8027
Node.js 0.12.x before 0.12.9, 4.x before 4.2.3, and 5.x before 5.1.1 does not ensure the availability of a parser for each HTTP socket, which allows remote attackers to cause a denial of service uncaughtException and service outage via a pipelined HTTP request...
PT-2016-3850
Name of the Vulnerable Software and Affected Versions Node.js versions 0.12.x through 0.12.8 Node.js versions 4.x through 4.2.2 Node.js versions 5.x through 5.1.0 Description The issue allows remote attackers to cause a denial of service, resulting in an uncaughtException and service outage, via ...
CVE-2015-8027: Undefined Security Weakness
Node.js 0.12.x before 0.12.9, 4.x before 4.2.3, and 5.x before 5.1.1 does not ensure the availability of a parser for each HTTP socket, which allows remote attackers to cause a denial of service uncaughtException and service outage via a pipelined HTTP request...