9 matches found
MAL-2024-9055 Malicious code in visionmedia-debug (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a9f97da9aaeeef379ef75184d8cffe9373b7cbab6709cfa793ae839d7f8ee2a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in visionmedia-debug (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a9f97da9aaeeef379ef75184d8cffe9373b7cbab6709cfa793ae839d7f8ee2a0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Moderate severity vulnerability that affects send
Withdrawn, accidental duplicate publish. visionmedia send before 0.8.4 for Node.js uses a partial comparison for verifying whether a directory is within the document root, which allows remote attackers to access restricted directories, as demonstrated using "public-restricted" under a "public"...
GHSA-PGV6-JRVV-75JP Moderate severity vulnerability that affects send
Withdrawn, accidental duplicate publish. visionmedia send before 0.8.4 for Node.js uses a partial comparison for verifying whether a directory is within the document root, which allows remote attackers to access restricted directories, as demonstrated using "public-restricted" under a "public"...
DEBIAN-CVE-2014-6394
visionmedia send before 0.8.4 for Node.js uses a partial comparison for verifying whether a directory is within the document root, which allows remote attackers to access restricted directories, as demonstrated using "public-restricted" under a "public" directory...
CVE-2014-6394
visionmedia send before 0.8.4 for Node.js uses a partial comparison for verifying whether a directory is within the document root, which allows remote attackers to access restricted directories, as demonstrated using "public-restricted" under a "public" directory...
CVE-2014-6394
visionmedia send before 0.8.4 for Node.js uses a partial comparison for verifying whether a directory is within the document root, which allows remote attackers to access restricted directories, as demonstrated using "public-restricted" under a "public" directory...
UBUNTU-CVE-2014-6394
visionmedia send before 0.8.4 for Node.js uses a partial comparison for verifying whether a directory is within the document root, which allows remote attackers to access restricted directories, as demonstrated using "public-restricted" under a "public" directory...
CVE-2014-6394
visionmedia send before 0.8.4 for Node.js uses a partial comparison for verifying whether a directory is within the document root, which allows remote attackers to access restricted directories, as demonstrated using "public-restricted" under a "public" directory...