Lucene search
+L
VulnersosvMost viewed

10827 matches found

vulnersOsv
vulnersOsv
•added 2021/03/12 10:39 p.m.•3 views

@solid/community-server (0.4.1) potentially affected by unknown CVE via @solid/identity-token-verifier (0.4.3)

@solid/identity-token-verifier NPM version 0.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on @solid/identity-token-verifier and may be impacted: - @solid/community-server 0.4.1 Source cves: unknown CVE Source advisory: OSV:GHSA-XMH9-RG6F-J3MR...

5.4AI score
SaveExploits0
vulnersOsv
vulnersOsv
•added 2021/03/10 3:34 p.m.•3 views

08cms (1.0.0), 0uth (>=1.0.5, <=1.2.1) +10865 more potentially affected by CVE-2021-21366 via xmldom (>=0.1.2, <=0.4.0)

xmldom NPM version =0.1.2, =1.0.5, =1.0.0, =1.0.0, =1.7.3, =0.1.0, =0.0.2, =0.0.1, =1.0.23, =1.0.0, =0.0.3, =0.1.0, =6.0.0-rc.0 and more Source cves: CVE-2021-21366 Source advisory: SNYK:JS-XMLDOM-1084960...

4.3CVSS5.5AI score0.01328EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2021/03/08 10:18 a.m.•3 views

@metascraper/helpers (>=5.12.14, <=5.21.0), @urlint/core (>=1.9.14, <=1.9.17) +61 more potentially affected by CVE-2021-23371 via chrono-node (>=2.0.2, <=2.2.3)

chrono-node NPM version =2.0.2, =5.12.14, =1.9.14, =1.0.0, =1.24.76, =1.24.76, =1.24.76, =1.32.40, =1.24.76, =1.24.76, =1.24.76, =1.24.76, =1.24.76, =1.32.47-alpha.0, =1.24.76, =1.24.76, =1.32.83 and more Source cves: CVE-2021-23371 Source advisory: SNYK:JS-CHRONONODE-1083228...

7.5CVSS7.4AI score0.01987EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2021/03/05 5:05 p.m.•3 views

317-project (0.0.0), 4pm-cli (>=0.0.1, <=0.0.5) +1887 more potentially affected by CVE-2020-28502 via xmlhttprequest (>=1.2.2, <=1.6.0)

xmlhttprequest NPM version =1.2.2, =0.0.1, =0.1.16-master.20181116180810, =0.1.0, =1.1.1, =0.0.4, =0.0.53, =0.0.42, =1.0.399-main, =0.1.0, =0.1.1 and more Source cves: CVE-2020-28502 Source advisory: SNYK:JS-XMLHTTPREQUEST-1082935...

8.1CVSS7.8AI score0.04646EPSS
SaveExploits2
vulnersOsv
vulnersOsv
•added 2021/02/23 6:13 p.m.•3 views

@ioup/mia-bot (0.0.1) potentially affected by CVE-2021-23378 via picotts (0.1.1)

picotts NPM version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on picotts and may be impacted: - @ioup/mia-bot 0.0.1 Source cves: CVE-2021-23378 Source advisory: SNYK:JS-PICOTTS-1078539...

9.8CVSS8.6AI score0.01943EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2021/02/17 12:00 p.m.•3 views

font (>=0.0.2, <=0.3.2), msdfgen (0.1.0) +2 more potentially affected by CVE-2021-28030 via truetype (>=0.3.0, <=0.22.0)

truetype CARGO version =0.3.0, =0.0.2, =0.4.3, =0.0.2, =0.0.4 Source cves: CVE-2021-28030 Source advisory: OSV:RUSTSEC-2021-0029...

7.5CVSS7.4AI score0.01059EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2021/02/11 8:47 p.m.•3 views

@byhuz/huz-ui-sigma (>=1.0.19, <=1.0.27), @deliverybot/client (>=0.7.0, <=0.7.2) +30 more potentially affected by CVE-2021-23327 via apexcharts (>=3.2.0, <=3.23.1)

apexcharts NPM version =3.2.0, =1.0.19, =0.7.0, =0.0.2, =0.0.2, =0.0.2, =0.0.2, =7.20.0-snapshot-1617172219791, =2.3.0, =1.0.3, =0.0.1, =0.0.1, =0.0.1, =1.1.0, =1.15.0 and more Source cves: CVE-2021-23327 Source advisory: OSV:GHSA-W46J-8HM6-H8MM...

6.3CVSS6.3AI score0.0137EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2021/02/09 12:00 p.m.•3 views

amiwo (>=0.0.1, <=0.2.3), geoshaper (>=0.1.0, <=0.2.0) +8 more potentially affected by CVE-2021-29935 via rocket (>=0.1.6, <=0.2.11)

rocket CARGO version =0.1.6, =0.0.1, =0.1.0, =0.8.0, =0.15.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.1 Source cves: CVE-2021-29935 Source advisory: OSV:RUSTSEC-2021-0044...

7.5CVSS7.4AI score0.01025EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2021/02/05 12:00 p.m.•3 views

a2 (>=0.5.0-alpha.6, <=0.5.0-alpha.7), anitable (0.1.0) +66 more potentially affected by CVE-2021-21299 via hyper (>=0.13.0-alpha.1, <=0.13.7)

hyper CARGO version =0.13.0-alpha.1, =0.5.0-alpha.6, =0.1.0, =0.30.0, =0.30.0, =0.30.0, =0.30.0, =0.30.0, =0.30.0, =0.30.0, =0.30.0, =0.31.1 and more Source cves: CVE-2021-21299 Source advisory: OSV:RUSTSEC-2021-0020...

8.1CVSS7.8AI score0.04771EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2021/01/30 12:00 p.m.•3 views

airust (0.1.6), font (>=0.0.2, <=0.3.2) +6 more potentially affected by CVE-2021-26953 via postscript (>=0.2.5, <=0.11.1)

postscript CARGO version =0.2.5, =0.0.2, =0.0.2, =0.1.0, =0.4.3, =0.1.0, =0.0.2, =0.0.4 Source cves: CVE-2021-26953 Source advisory: OSV:RUSTSEC-2021-0017...

7.5CVSS7.4AI score0.01489EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2021/01/26 11:07 a.m.•3 views

m2345a-atm (>=1.0.0, <=1.0.1), ndsh (>=1.5.1, <=1.5.5) +1 more potentially affected by CVE-2020-28490 via async-git (1.13.0)

async-git NPM version 1.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on async-git and may be impacted: - m2345a-atm =1.0.0, =1.5.1, =1.8.1, =1.9.1 Source cves: CVE-2020-28490 Source advisory: SNYK:JS-ASYNCGIT-1064877...

9.8CVSS8.6AI score0.02549EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2021/01/22 11:47 a.m.•3 views

m2345a-atm (>=1.0.0, <=1.0.1), ndsh (>=1.5.1, <=1.5.5) +1 more potentially affected by CVE-2021-3190 via async-git (1.13.0)

async-git NPM version 1.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on async-git and may be impacted: - m2345a-atm =1.0.0, =1.5.1, =1.8.1, =1.9.1 Source cves: CVE-2021-3190 Source advisory: SNYK:JS-ASYNCGIT-1063505...

9.8CVSS8.6AI score0.05323EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2021/01/20 9:22 p.m.•3 views

7ghost (>=4.11.25, <=4.11.46), @abcpros/bitcore-build (>=8.25.29, <=8.25.30) +1111 more potentially affected by CVE-2020-28481 via socket.io (>=2.0.1, <=2.3.0)

socket.io NPM version =2.0.1, =4.11.25, =8.25.29, =1.0.0, =0.0.4, =1.0.9, =1.1.13, =0.2.9-dev-10, =2018.7.11-0, =0.1.14, =0.0.1, =0.0.1, =1.0.0-alpha.18, =1.0.0-feature-e945fc-k9e8d9l7 and more Source cves: CVE-2020-28481 Source advisory: OSV:GHSA-FXWF-4RQH-V8G3...

5.3CVSS5.3AI score0.0073EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2021/01/19 2:04 p.m.•3 views

@convergence/jointjs-utils (0.4.0), aihub (>=1.0.1, <=1.0.2) +7 more potentially affected by CVE-2020-28479 via jointjs (>=3.1.0, <=3.2.0)

jointjs NPM version =3.1.0, =1.0.1, =1.0.6, =1.0.1, =1.0.1, =0.9.0, =0.10.1 - ublatt 1.2.0 - vue-erd 0.1.1 - vue-test-demo-one 0.1.0 Source cves: CVE-2020-28479 Source advisory: SNYK:JS-JOINTJS-1062038...

7.5CVSS7.4AI score0.02047EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2021/01/17 12:00 p.m.•3 views

addr2line (0.6.0), backtrace (>=0.3.6, <=0.3.9) +11 more potentially affected by CVE-2021-25901 via lazy-init (>=0.1.1, <=0.3.0)

lazy-init CARGO version =0.1.1, =0.3.6, =0.1.0, =0.1.0, =0.1.0, =0.7.0, =0.4.0, =0.4.0, =0.2.0, =0.2.0, =0.1.0, =0.1.0, =0.3.0 Source cves: CVE-2021-25901 Source advisory: OSV:RUSTSEC-2021-0004...

5.3CVSS5.7AI score0.01314EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2021/01/07 12:00 p.m.•3 views

av-codec (>=0.1.0, <=0.2.1), av-format (>=0.1.0, <=0.3.0) +3 more potentially affected by CVE-2021-25904 via av-data (>=0.1.0, <=0.2.2)

av-data CARGO version =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.1 - libaom 0.2.0 - libvpx 0.1.0 Source cves: CVE-2021-25904 Source advisory: OSV:RUSTSEC-2021-0007...

7.5CVSS7.4AI score0.01327EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2021/01/06 7:25 p.m.•3 views

@agentlab/ldkg-ui-react (>=0.1.7, <=0.1.12), @belvoly-vue-aioa/tinymce (>=0.1.6, <=0.1.9) +56 more potentially affected by unknown CVE via tinymce (>=5.0.6, <=5.5.1)

tinymce NPM version =5.0.6, =0.1.7, =0.1.6, =0.0.1, =9.0.0-alpha.5, =0.1.2, =0.8.4, =0.18.0, =0.0.1-alpha.9, =15.0.1, =1.2.2, =0.17.0, =0.1.0, =0.0.1, =0.0.4 - @yanghp/amis 1.1.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-H96F-FC7C-9R55...

5.4AI score
SaveExploits0
vulnersOsv
vulnersOsv
•added 2021/01/05 12:00 p.m.•3 views

agnes (>=0.3.0, <=0.3.2), automl (>=0.2.6, <=0.2.7) +1 more potentially affected by CVE-2021-45686 via csv-sniffer (0.1.1)

csv-sniffer CARGO version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on csv-sniffer and may be impacted: - agnes =0.3.0, =0.2.6, =0.1.7, =0.1.8 Source cves: CVE-2021-45686 Source advisory: OSV:RUSTSEC-2021-0088...

9.8CVSS8.5AI score0.01191EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2020/12/18 6:23 p.m.•3 views

3nit-utils (>=0.24.0, <=1.0.2), @36node/template-service (0.3.5) +577 more potentially affected by CVE-2020-35149 via mquery (>=3.0.0, <=3.2.2)

mquery NPM version =3.0.0, =0.24.0, =0.2.0, =3.7.0, =0.1.17, =1.0.0, =0.0.1, =0.0.2, =5.9.7, =0.7.0, =1.0.33, =2.1.3 and more Source cves: CVE-2020-35149 Source advisory: OSV:GHSA-45Q2-34RF-MR94...

5.3CVSS5.6AI score0.01028EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2020/12/14 7:40 a.m.•3 views

@patrick91/ghost (5.2.3-patrick.1), @tryghost/settings-path-manager (>=0.1.0, <=0.1.9) +10 more potentially affected by unknown CVE via props (>=0.2.4, <=0.3.0)

props NPM version =0.2.4, =0.1.0, =0.0.0, =0.0.1-alpha1, =0.0.0, =4.24.0, =0.0.4, =0.1.1, =0.1.0, =0.1.0, =0.1.11 Source cves: unknown CVE Source advisory: SNYK:JS-PROPS-1015750...

5.4AI score
SaveExploits0
vulnersOsv
vulnersOsv
•added 2020/12/11 2:59 p.m.•3 views

geojson2 (>=0.1.1, <=0.1.8) potentially affected by CVE-2020-28429 via geojson2kml (0.1.1)

geojson2kml NPM version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on geojson2kml and may be impacted: - geojson2 =0.1.1, =0.1.8 Source cves: CVE-2020-28429 Source advisory: SNYK:JS-GEOJSON2KML-1050412...

9.8CVSS5.3AI score0.63305EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2020/12/10 4:53 p.m.•3 views

37fis (>=1.0.0, <=1.0.2), 3loc (>=0.2.0, <=0.4.0) +1851 more potentially affected by CVE-2020-7788 via ini (>=1.0.0, <=1.3.5)

ini NPM version =1.0.0, =1.0.0, =0.2.0, =0.13.31, =0.0.17, =1.0.0, =1.0.0, =6.1.3, =1.0.99, =0.0.1-beta.2, =0.0.1-beta.2, =0.0.1-beta.2, =6.2.9, =1.0.3, =0.2.333, =0.2.346 and more Source cves: CVE-2020-7788 Source advisory: OSV:GHSA-QQGX-2P2H-9C37...

9.8CVSS6.8AI score0.03612EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2020/12/08 9:42 p.m.•3 views

@here/cli (>=1.5.0, <=1.6.1), @node-amazon/mws (>=0.0.2, <=0.0.3) +10 more potentially affected by CVE-2020-26256 via @fast-csv/parse (>=4.1.4, <=4.3.3)

@fast-csv/parse NPM version =4.1.4, =1.5.0, =0.0.2, =2.1.0-rc, =1.0.0, =1.2.127, =1.2.135, =1.2.111, =6.42.0, =4.1.4, =0.0.1, =0.0.6 Source cves: CVE-2020-26256 Source advisory: OSV:GHSA-8CV5-P934-3HWP...

6.5CVSS5.3AI score0.01518EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2020/12/08 1:02 p.m.•3 views

37fis (>=1.0.0, <=1.0.2), 3loc (>=0.2.0, <=0.4.0) +1851 more potentially affected by CVE-2020-7788 via ini (>=1.0.0, <=1.3.5)

ini NPM version =1.0.0, =1.0.0, =0.2.0, =0.13.31, =0.0.17, =1.0.0, =1.0.0, =6.1.3, =1.0.99, =0.0.1-beta.2, =0.0.1-beta.2, =0.0.1-beta.2, =6.2.9, =1.0.3, =0.2.333, =0.2.346 and more Source cves: CVE-2020-7788 Source advisory: SNYK:JS-INI-1048974...

9.8CVSS6.8AI score0.03612EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2020/12/04 5:37 p.m.•3 views

@mdslab/iotronic-lightning-rod (>=2.3.1, <=2.3.6), connection-test-table (>=0.1.0, <=0.1.3) +9 more potentially affected by CVE-2020-7781 via connection-tester (>=0.0.7, <=0.2.0)

connection-tester NPM version =0.0.7, =2.3.1, =0.1.0, =0.0.1, =0.0.1, =0.0.10, =1.1.3, =0.0.1, =0.0.1, =1.0.0, =0.0.1, =0.1.2 Source cves: CVE-2020-7781 Source advisory: SNYK:JS-CONNECTIONTESTER-1048337...

9.8CVSS8.6AI score0.01966EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2020/12/04 5:30 p.m.•3 views

hltc-webapi-master (>=1.0.0, <=1.2.0), verda (>=0.1.0, <=1.2.1) potentially affected by CVE-2020-7784 via ts-process-promises (1.0.2)

ts-process-promises NPM version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on ts-process-promises and may be impacted: - hltc-webapi-master =1.0.0, =0.1.0, =1.2.1 Source cves: CVE-2020-7784 Source advisory: SNYK:JS-TSPROCESSPROMISES-1048334...

9.8CVSS8.6AI score0.01355EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2020/11/23 4:29 p.m.•3 views

@azteam/monitor (>=1.0.1, <=1.0.9), @best/builder (>=4.0.0-alpha10, <=4.0.0-beta9) +25 more potentially affected by CVE-2020-26245 +1 more via systeminformation (>=4.0.9, <=4.27.11)

systeminformation NPM version =4.0.9, =1.0.1, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =0.0.3, =1.1.0, =1.2.3 - @hnordt/sysinfo 0.1.1 and more Source cves:...

9.8CVSS8.2AI score0.02422EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2020/11/22 9:43 a.m.•3 views

fabric8-analytics-lsp-server (0.3.0), graphql-validated-types (>=2.7.0, <=2.11.0) +1 more potentially affected by unknown CVE via semver-regex (>=3.0.0, <=3.1.1)

semver-regex NPM version =3.0.0, =2.7.0, =1.2.0, =1.2.3 Source cves: unknown CVE Source advisory: SNYK:JS-SEMVERREGEX-1047770...

5.4AI score
SaveExploits0
vulnersOsv
vulnersOsv
•added 2020/11/18 9:19 p.m.•3 views

@arbetsmyra/semantic-release-config (>=1.0.2, <=1.1.4), @crystal-ball/semantic-release-base (>=2.13.0, <=2.22.0) +17 more potentially affected by CVE-2020-26226 via semantic-release (>=17.0.1, <=17.2.2)

semantic-release NPM version =17.0.1, =1.0.2, =2.13.0, =1.63.0, =2.0.0, =10.1.2, =1.2.0, =1.0.0, =1.4.0, =4.0.19, =8.0.0, =2.4.9, =10.0.0, =11.0.0 and more Source cves: CVE-2020-26226 Source advisory: OSV:GHSA-R2J6-P67H-Q639...

8.1CVSS7.9AI score0.01401EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2020/11/17 1:02 p.m.•3 views

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 02-infrastructure (1.0.0) +54198 more potentially affected by CVE-2021-23337 via lodash.template (>=2.2.1, <=4.18.1)

lodash.template NPM version =2.2.1, =1.0.1, =0.0.2, =0.0.10 - 0x0.icu.anima 0.1.0 - 0xgank-tea-advice-pull 1.0.0 - 0xgank-tea-balance-pencil 1.0.0 - 0xgank-tea-brick-bell 1.0.0 - 0xgank-tea-cake-victory 1.0.0 - 0xgank-tea-central-compound 1.0.0 - 0xgank-tea-characteristic 1.0.0 -...

7.2CVSS6.2AI score0.21333EPSS
SaveExploits3
vulnersOsv
vulnersOsv
•added 2020/11/17 12:00 p.m.•3 views

specs (>=0.8.0, <=0.8.1) potentially affected by CVE-2020-36439 via ticketed_lock (0.1.0)

ticketedlock CARGO version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on ticketedlock and may be impacted: - specs =0.8.0, =0.8.1 Source cves: CVE-2020-36439 Source advisory: OSV:RUSTSEC-2020-0119...

8.1CVSS7.8AI score0.00766EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2020/11/14 12:00 p.m.•3 views

ate (>=1.0.0, <=1.3.0), ate-auth (>=1.7.0, <=1.9.0) +8 more potentially affected by CVE-2020-36451 via rcu_cell (>=0.1.12, <=1.2.1)

rcucell CARGO version =0.1.12, =1.0.0, =1.7.0, =1.0.0, =1.6.0, =1.8.0, =1.0.0, =0.2.0, =0.1.0, =1.0.0, =1.3.0 Source cves: CVE-2020-36451 Source advisory: OSV:RUSTSEC-2020-0131...

8.1CVSS7.8AI score0.01249EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2020/11/08 12:00 p.m.•3 views

a2 (>=0.2.0, <=0.5.0-alpha.7), a2d (>=0.1.0, <=0.1.11) +5210 more potentially affected by CVE-2020-35910 +4 more via lock_api (>=0.1.5, <=0.3.4)

lockapi CARGO version =0.1.5, =0.2.0, =0.1.0, =0.5.3, =0.1.0, =0.2.1, =0.1.1, =0.0.1, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.9.1 and more Source cves: CVE-2020-35910, CVE-2020-35911, CVE-2020-35912, CVE-2020-35913, CVE-2020-35914 Source advisory: OSV:RUSTSEC-2020-0070...

5.5CVSS4.9AI score0.00324EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2020/11/04 2:45 p.m.•3 views

@bgpat/webext-webpack-plugin (>=0.1.7, <=0.1.8), @inkofpixel/shopify-builder (>=0.0.3, <=0.0.16) +24 more potentially affected by CVE-2020-7789 via node-notifier (9.0.0)

node-notifier NPM version 9.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on node-notifier and may be impacted: - @bgpat/webext-webpack-plugin =0.1.7, =0.0.3, =17.1.8, =0.0.1, =0.3.1, =6.7.0, =1.4.0, =0.6.2, =0.5.19-a3, =2.3.2, =1.0.0, =1.0.0, =1.0....

6.8CVSS6.9AI score0.01575EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2020/10/29 7:40 p.m.•3 views

@koj/strapi (>=0.0.0, <=1.4.0), strapi-editorjs (0.0.1) +1 more potentially affected by CVE-2020-27666 via strapi-plugin-content-manager (>=3.0.0-beta.18.7, <=3.1.6)

strapi-plugin-content-manager NPM version =3.0.0-beta.18.7, =0.0.0, =0.0.1-alpha.1, =0.0.1-alpha.2 Source cves: CVE-2020-27666 Source advisory: OSV:GHSA-QVP5-MM7V-4F36...

5.4CVSS5.7AI score0.00715EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2020/10/29 6:29 p.m.•3 views

@koj/strapi (>=0.0.0, <=1.4.0) potentially affected by CVE-2020-27665 via strapi-plugin-content-type-builder (3.1.6)

strapi-plugin-content-type-builder NPM version 3.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on strapi-plugin-content-type-builder and may be impacted: - @koj/strapi =0.0.0, =1.4.0 Source cves: CVE-2020-27665 Source advisory: OSV:GHSA-4P55-XJ37-FX...

7.5CVSS7.4AI score0.01209EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2020/10/27 1:01 p.m.•3 views

2bsafe-api (>=1.0.1, <=1.0.2), 3architecture (>=1.0.0, <=1.7.0) +2318 more potentially affected by CVE-2020-7765 via @firebase/util (>=0.1.4, <=0.3.3-2020926155854)

@firebase/util NPM version =0.1.4, =1.0.1, =1.0.0, =1.0.0, =1.0.0, =0.1.0, =0.1.1, =1.0.24, =0.65.0, =0.53.0, =0.50.0, =1.0.1, =0.0.2, =0.0.1, =0.1.0 and more Source cves: CVE-2020-7765 Source advisory: SNYK:JS-FIREBASEUTIL-1038324...

5.6CVSS5.3AI score0.00569EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2020/10/19 8:55 p.m.•3 views

-tompan-reacttemplate (>=1.0.1, <=1.1.0), 0x0.icu.anima (0.1.0) +6580 more potentially affected by CVE-2020-15256 via object-path (>=0.0.1, <=0.11.4)

object-path NPM version =0.0.1, =1.0.1, =8.4.2, =0.0.1, =0.1.0, =0.1.0, =0.1.0, =0.1.1, =0.1.99 and more Source cves: CVE-2020-15256 Source advisory: OSV:GHSA-CWX2-736X-MF6W...

9.8CVSS7.5AI score0.01546EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2020/10/16 4:53 p.m.•3 views

@joshmccall/atomic-stories (>=0.0.0-semantically-released, <=1.9.5), abmcontent (0.1.0) +3 more potentially affected by CVE-2020-7787 via react-adal (>=0.3.15, <=0.4.24)

react-adal NPM version =0.3.15, =0.0.0-semantically-released, =0.1.0, =0.1.3 - widgettestcomponent 0.1.0 Source cves: CVE-2020-7787 Source advisory: SNYK:JS-REACTADAL-1018907...

8.2CVSS7.8AI score0.01266EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2020/10/15 12:00 p.m.•3 views

acme-dns-rust (>=1.0.0, <=1.0.6), aerospike (>=0.4.0, <=1.3.0) +93 more potentially affected by unknown CVE via block-cipher (>=0.7.1, <=0.8.0)

block-cipher CARGO version =0.7.1, =1.0.0, =0.4.0, =0.4.0, =0.7.0, =0.1.0, =0.1.1, =0.1.1, =0.8.1, =0.2.0, =0.5.0, =0.2.0, =0.7.0, =0.8.0 - chacha20 0.5.0 - chacha20poly1305 0.6.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2020-0057...

5.4AI score
SaveExploits0
vulnersOsv
vulnersOsv
•added 2020/09/30 3:20 p.m.•3 views

@attraqt/activity (>=0.0.1, <=1.3.0), @attraqt/xo-js (0.0.1) +2 more potentially affected by CVE-2020-28464 via djv (2.1.3-alpha.0)

djv NPM version 2.1.3-alpha.0 is affected by a known vulnerability. The following packages have a transitive dependency on djv and may be impacted: - @attraqt/activity =0.0.1, =1.1.8, =1.0.3, =1.1.6 Source cves: CVE-2020-28464 Source advisory: SNYK:JS-DJV-1014545...

10CVSS8.6AI score0.02996EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2020/09/11 9:23 p.m.•3 views

@cqingwang/react-native-update (>=14.0.5, <=15.0.3), @mervinzhu/react-native-update-pod (>=5.0.1, <=5.0.3) +23 more potentially affected by unknown CVE via entitlements (>=1.0.0, <=1.2.0)

entitlements NPM version =1.0.0, =14.0.5, =5.0.1, =0.0.1, =1.0.0, =1.0.0, =1.0.0, =0.1.0, =1.0.2, =1.0.0, =1.0.0, =1.4.1, =1.0.2, =1.0.3 and more Source cves: unknown CVE Source advisory: OSV:GHSA-G8VP-6HV4-M67C...

5.4AI score
SaveExploits0
vulnersOsv
vulnersOsv
•added 2020/09/04 6:04 p.m.•3 views

3nit-components (>=0.0.2, <=0.0.4), 3nit-utils (>=0.3.0, <=0.23.0) +108 more potentially affected by unknown CVE via next (>=1.2.3, <=5.0.1-canary.14)

next NPM version =1.2.3, =0.0.2, =0.3.0, =0.0.1, =3.0.1, =1.0.1, =1.0.1, =1.0.0, =1.0.0, =1.0.5, =0.3.0, =1.0.2, =0.0.1, =0.1.10 and more Source cves: unknown CVE Source advisory: OSV:GHSA-5VJ8-3V2H-H38V...

5.4AI score
SaveExploits0
vulnersOsv
vulnersOsv
•added 2020/09/04 6:00 p.m.•3 views

@absolunet/ioc (2.0.0), @absolunet/nwayo-workflow (>=3.7.2, <=3.8.1) +885 more potentially affected by CVE-2020-7608 via yargs-parser (>=16.0.0, <=18.1.0)

yargs-parser NPM version =16.0.0, =3.7.2, =6.0.4, =1.0.0, =1.0.2, =1.0.6, =1.4.0-alpha.1, =1.19.6, =1.0.0, =5.0.0, =2.0.0-beta.2, =2.0.0-beta.2, =2.3.2 and more Source cves: CVE-2020-7608 Source advisory: OSV:GHSA-P9PC-299P-VXGP...

5.3CVSS6.8AI score0.00514EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2020/09/04 6:00 p.m.•3 views

another-work-report-generator (>=3.4.1, <=3.4.5), largest-package (>=5.0.0, <=8.0.0) +5 more potentially affected by CVE-2020-7608 via yargs-parser (5.0.0-security.0)

yargs-parser NPM version 5.0.0-security.0 is affected by a known vulnerability. The following packages have a transitive dependency on yargs-parser and may be impacted: - another-work-report-generator =3.4.1, =5.0.0, =1.1.0, =0.1.0, =4.13.5, =0.7.25, =0.7.26 - yargs 7.1.1 Source cves: CVE-2020-76...

5.3CVSS6.8AI score0.00514EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2020/09/04 5:59 p.m.•3 views

@acanto/october-scripts (3.2.2), @acanto/workflow (5.1.0) +891 more potentially affected by unknown CVE via http-proxy (>=1.0.0, <=1.18.0)

http-proxy NPM version =1.0.0, =2018.7.11-0, =0.0.1, =0.156.0, =2.6.6, =4.0.0, =3.0.1, =0.0.1, =1.12.2-next.3, =1.0.0, =1.0.3 and more Source cves: unknown CVE Source advisory: OSV:GHSA-6X33-PW7P-HMPQ...

5.4AI score
SaveExploits0
vulnersOsv
vulnersOsv
•added 2020/09/04 3:27 p.m.•3 views

@toolspack/ttd-common (>=0.1.0, <=1.3.2), @toolspack/ttd-pdfjs (>=0.0.0, <=0.1.4) potentially affected by unknown CVE via babel-laoder (0.0.1-security)

babel-laoder NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on babel-laoder and may be impacted: - @toolspack/ttd-common =0.1.0, =0.0.0, =0.1.4 Source cves: unknown CVE Source advisory: OSV:GHSA-QP6M-JQFR-2F7V...

5.4AI score
SaveExploits0
vulnersOsv
vulnersOsv
•added 2020/09/04 3:26 p.m.•3 views

192.168.0.172 (4.6.1), 2-ways-binding-example (0.0.1) +2248 more potentially affected by unknown CVE via react (>=0.1.2, <=0.13.3)

react NPM version =0.1.2, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =0.1.10, =0.1.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =2.0.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-HG79-J56M-FXGV...

5.4AI score
SaveExploits0
vulnersOsv
vulnersOsv
•added 2020/09/04 3:22 p.m.•3 views

camp (15.2.23), fleau (15.2.18) potentially affected by unknown CVE via localeval (15.2.3)

localeval NPM version 15.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on localeval and may be impacted: - camp 15.2.23 - fleau 15.2.18 Source cves: unknown CVE Source advisory: OSV:GHSA-MMQV-M45H-Q2HP...

5.4AI score
SaveExploits0
vulnersOsv
vulnersOsv
•added 2020/09/04 3:18 p.m.•3 views

ezs (>=5.5.0, <=9.3.1), hoppel (0.4.0) +2 more potentially affected by unknown CVE via notevil (>=1.0.0, <=1.3.1)

notevil NPM version =1.0.0, =5.5.0, =1.0.0, =1.0.1 - piedpiper-middle-out 5.8.1 Source cves: unknown CVE Source advisory: OSV:GHSA-9GXR-RHX6-4JGV...

5.4AI score
SaveExploits0
Total number of security vulnerabilities5000