Lucene search
K

36 matches found

EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2018-0577

Malware in sbrugna...

8.8CVSS8.8AI score0.01422EPSS
Exploits1References9
EUVD
EUVD
added 2025/10/07 12:30 a.m.4 views

EUVD-2018-0773

Malware in sbrugna...

6.1CVSS6.2AI score0.00966EPSS
Exploits1References6
EUVD
EUVD
added 2025/10/07 12:30 a.m.3 views

EUVD-2021-0864

Malware in sbrugna...

7.5CVSS7.5AI score0.02589EPSS
Exploits1References8
RedhatCVE
RedhatCVE
added 2025/05/22 3:25 p.m.5 views

CVE-2020-27543

The restify-paginate package 0.0.5 for Node.js allows remote attackers to cause a Denial-of-Service by omitting the HTTP Host header. A Restify-based web service would crash with an uncaught exception...

7.5CVSS6.9AI score0.02589EPSS
Exploits1
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/09/04 8:55 a.m.3 views

Malicious code in falcor-restify-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d65bd1e0827a70f5ef5dcd48080f47b4954d22f07cdba313bf94bb7508d4f1f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
Exploits0References1
OSV
OSV
added 2024/09/04 8:55 a.m.6 views

MAL-2024-8762 Malicious code in falcor-restify-demo (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d65bd1e0827a70f5ef5dcd48080f47b4954d22f07cdba313bf94bb7508d4f1f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
OSV
OSV
added 2021/04/12 6:59 p.m.18 views

GHSA-QR9H-VR5P-PWWX Denial of Service (DoS) in restify-paginate

The restify-paginate package 0.0.5 for Node.js allows remote attackers to cause a Denial-of-Service by omitting the HTTP Host header. A Restify-based web service would crash with an uncaught exception...

7.5CVSS7.5AI score0.02589EPSS
Exploits1References5
Github Security Blog
Github Security Blog
added 2021/04/12 6:59 p.m.60 views

Denial of Service (DoS) in restify-paginate

The restify-paginate package 0.0.5 for Node.js allows remote attackers to cause a Denial-of-Service by omitting the HTTP Host header. A Restify-based web service would crash with an uncaught exception...

7.5CVSS7.2AI score0.02589EPSS
Exploits1References5Affected Software1
Veracode
Veracode
added 2021/02/26 5:9 a.m.17 views

Denial Of Service (DoS)

restify-paginate is vulnerable to denial of service. An attacker is able to crash the application by omitting the HTTP Host header in the HTTP request...

7.5CVSS0.9AI score0.02589EPSS
Exploits1References4Affected Software1
OSV
OSV
added 2021/02/25 5:15 p.m.4 views

CVE-2020-27543

The restify-paginate package 0.0.5 for Node.js allows remote attackers to cause a Denial-of-Service by omitting the HTTP Host header. A Restify-based web service would crash with an uncaught exception...

7.5CVSS7.2AI score0.02589EPSS
Exploits1References4
NVD
NVD
added 2021/02/25 5:15 p.m.13 views

CVE-2020-27543

The restify-paginate package 0.0.5 for Node.js allows remote attackers to cause a Denial-of-Service by omitting the HTTP Host header. A Restify-based web service would crash with an uncaught exception...

7.5CVSS0.02589EPSS
Exploits1References4
Prion
Prion
added 2021/02/25 5:15 p.m.17 views

Design/Logic Flaw

The restify-paginate package 0.0.5 for Node.js allows remote attackers to cause a Denial-of-Service by omitting the HTTP Host header. A Restify-based web service would crash with an uncaught exception...

5CVSS7.5AI score0.02589EPSS
Exploits1References4Affected Software1
Cvelist
Cvelist
added 2021/02/25 4:15 p.m.13 views

CVE-2020-27543

The restify-paginate package 0.0.5 for Node.js allows remote attackers to cause a Denial-of-Service by omitting the HTTP Host header. A Restify-based web service would crash with an uncaught exception...

7.5AI score0.02589EPSS
Exploits1References4
CVE
CVE
added 2021/02/25 4:15 p.m.58 views

CVE-2020-27543

CVE-2020-27543 affects the restify-paginate package for Node.js (version 0.0.5). The vulnerability allows remote attackers to cause a Denial of Service by omitting the HTTP Host header, leading a Restify-based service to crash with an uncaught exception. Connected advisories (including Red Hat, G...

7.5CVSS7.5AI score0.02589EPSS
Exploits1References4Affected Software1
CNNVD
CNNVD
added 2021/02/25 12:0 a.m.5 views

Paul Varache restify-paginate security vulnerability

Paul Varache restify-paginate is a Paul Varache open source application. A middleware that helps navigation between pages. A security vulnerability in restify-paginate package 0.0.5 for Node.js allows remote attackers to cause a denial of service by ignoring HTTP host headers...

7.5CVSS7.2AI score0.02589EPSS
Exploits1References5
vulnersOsv
vulnersOsv
added 2020/09/03 5:15 p.m.4 views

peanut-restify (>=1.1.0 <=1.1.66) potentially affected by unknown CVE via restify-swagger-jsdoc (>=1.1.2 <=1.2.1)

restify-swagger-jsdoc NPM version =1.1.2, =1.1.0, =1.1.66 Source cves: unknown CVE Source advisory: OSV:GHSA-GVFF-25CC-4F66...

5.8AI score
Exploits0
OSV
OSV
added 2020/09/03 5:15 p.m.13 views

GHSA-GVFF-25CC-4F66 Path Traversal in restify-swagger-jsdoc

Versions of restify-swagger-jsdoc prior to 3.2.1 are vulnerable to Path Traversal. The package fails to properly sanitize URLs, which may allow attackers to access server files outside the swagger-ui folder by using relative paths. Recommendation Upgrade to version 3.2.1 or later...

7.1AI score
Exploits0References1
Github Security Blog
Github Security Blog
added 2020/09/03 5:15 p.m.96 views

Path Traversal in restify-swagger-jsdoc

Versions of restify-swagger-jsdoc prior to 3.2.1 are vulnerable to Path Traversal. The package fails to properly sanitize URLs, which may allow attackers to access server files outside the swagger-ui folder by using relative paths. Recommendation Upgrade to version 3.2.1 or later...

4.6AI score
Exploits0References2Affected Software1
Hacker One
Hacker One
added 2020/05/08 7:45 a.m.214 views

Node.js: Denial of Service by resource exhaustion CWE-400 due to unfinished HTTP/1.1 requests

Summary: Node.js is vulnerable to HTTP denial of service DOS attacks based on delayed requests submission which can make the server unable to accept new connections. Description: An attacker can open an arbitrary number of HTTP connections and keep the server busy by never completing the request...

5CVSS0.08794EPSS
Exploits0
vulnersOsv
vulnersOsv
added 2018/11/09 5:45 p.m.2 views

3c (>=0.0.1 <=1.0.0-alpha), @loklaan/npm-hook-slack (>=1.0.1 <=1.1.0-testing.2) +312 more potentially affected by CVE-2017-16018 via restify (>=2.1.1 <=4.0.4)

restify NPM version =2.1.1, =0.0.1, =1.0.1, =0.1.2, =0.2.5, =0.1.9, =0.0.1, =0.2.20, =0.3.7, =2.0.0, =1.0.1, =0.0.0, =0.0.1, =0.0.1, =0.5.1 and more Source cves: CVE-2017-16018 Source advisory: OSV:GHSA-QW3G-35HC-FCRH...

6.1CVSS6.3AI score0.00966EPSS
Exploits1
Rows per page
Query Builder