Vulnersosv - Page 66 of Vulnersosv Most Viewed Vulnerabilities List

VulnersosvMost viewed

10827 matches found

vulnersOsv•added 2020/07/15 7:15 p.m.•3 views

@braneframe/plugin-github (>=0.1.53-main.2922731, <=0.6.7), @dxos/plugin-github (>=0.6.8-main.046e6cf, <=0.7.4) +26 more potentially affected by CVE-2020-8203 via lodash.update (4.10.2)

lodash.update NPM version 4.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on lodash.update and may be impacted: - @braneframe/plugin-github =0.1.53-main.2922731, =0.6.8-main.046e6cf, =0.2.19, =0.0.1, =5.5.0, =22.1.0-pre.1, =5.2.0, =4.0.0, =1.0.0,...

7.4CVSS6.3AI score0.05213EPSS

SaveExploits1

vulnersOsv•added 2020/07/15 7:15 p.m.•3 views

@finviet-jsrpt/jsrpt-electron-pdf (>=1.0.0, <=1.0.6), @jsreport/jsreport-electron-pdf (>=4.0.0-beta.1, <=5.2.0) +18 more potentially affected by CVE-2020-8203 via lodash.pick (>=4.0.1, <=4.3.0)

lodash.pick NPM version =4.0.1, =1.0.0, =4.0.0-beta.1, =1.0.0-alpha.0, =0.1.0, =2.1.0, =1.0.0, =1.2.3, =2.3.0, =1.0.0-beta.1, =0.4.0, =0.1.0, =4.0.0-alpha.1, =4.0.0-alpha.5 and more Source cves: CVE-2020-8203 Source advisory: OSV:GHSA-P6MC-M468-83GW...

7.4CVSS6.3AI score0.05213EPSS

SaveExploits1

vulnersOsv•added 2020/07/15 7:15 p.m.•3 views

@vidispine/vdt-materialui (>=0.12.0-pre.1, <=26.2.0-pre.2) potentially affected by CVE-2020-8203 via lodash.updatewith (4.10.2)

lodash.updatewith NPM version 4.10.2 is affected by a known vulnerability. The following packages have a transitive dependency on lodash.updatewith and may be impacted: - @vidispine/vdt-materialui =0.12.0-pre.1, =26.2.0-pre.2 Source cves: CVE-2020-8203 Source advisory: OSV:GHSA-P6MC-M468-83GW...

7.4CVSS6.3AI score0.05213EPSS

SaveExploits1

vulnersOsv•added 2020/07/15 7:15 p.m.•3 views

0.workspace (>=0.1.0, <=0.1.1), 00ld8nuivn (2.1.0) +60348 more potentially affected by CVE-2020-8203 via lodash (>=3.7.0, <=4.17.18)

lodash NPM version =3.7.0, =0.1.0, =1.0.0, =1.1.0 - 02rjq8i863 1.1.0 - 02vx8qsp01 2.1.0 - 05y6tjgmws 1.1.0 - 066m7q8o0z 2.1.0 - 06buj9h3su 2.1.0 - 06dre15t8r 2.1.0 - 07fgapmu9l 1.1.0 - 07t2xvu6t4 2.1.0 - 0850u4lkpu 1.1.0 - 08cms 1.0.0 and more Source cves: CVE-2020-8203 Source advisory:...

7.4CVSS6.3AI score0.05213EPSS

SaveExploits1

vulnersOsv•added 2020/07/07 6:59 p.m.•3 views

@adpt/cli (>=0.4.0-next.27, <=0.4.0-next.28), @alasdair/check-engines (1.0.0) +142 more potentially affected by unknown CVE via npm-registry-fetch (>=5.0.0, <=8.1.0)

npm-registry-fetch NPM version =5.0.0, =0.4.0-next.27, =0.1.0, =0.21.0, =1.0.0, =1.0.0, =0.1.0, =0.2.0, =0.14.0, =4.0.13, =3.1.10, =2.3.0, =3.1.10, =3.1.10, =3.1.11 and more Source cves: unknown CVE Source advisory: OSV:GHSA-JMQM-F2GX-4FJV...

5.4AI score

SaveExploits0

vulnersOsv•added 2020/06/23 12:00 p.m.•3 views

accepted (>=0.1.13, <=0.1.20), actors-rs (>=0.1.0, <=0.1.4) +326 more potentially affected by CVE-2020-25573 via linked-hash-map (>=0.0.9, <=0.4.2)

linked-hash-map CARGO version =0.0.9, =0.1.13, =0.1.0, =0.1.0, =1.0.0, =0.1.0, =0.1.0, =0.5.0, =0.3.1, =0.3.2, =0.1.0, =0.1.0, =0.7.1 and more Source cves: CVE-2020-25573 Source advisory: OSV:RUSTSEC-2020-0026...

9.8CVSS8.5AI score0.01792EPSS

SaveExploits1

vulnersOsv•added 2020/06/20 12:38 p.m.•3 views

node-wakeup (0.1.0) potentially affected by CVE-2020-7684 via rollup-plugin-serve-favicon (0.4.7)

rollup-plugin-serve-favicon NPM version 0.4.7 is affected by a known vulnerability. The following packages have a transitive dependency on rollup-plugin-serve-favicon and may be impacted: - node-wakeup 0.1.0 Source cves: CVE-2020-7684 Source advisory: SNYK:JS-ROLLUPPLUGINSERVEFAVICON-585950...

9.8CVSS8.6AI score0.01474EPSS

SaveExploits0

vulnersOsv•added 2020/06/19 12:00 p.m.•3 views

afterburn (4.1.0), aoaddons (>=0.1.1, <=0.1.6) +55 more potentially affected by unknown CVE via pnet_packet (>=0.20.0, <=0.26.0)

pnetpacket CARGO version =0.20.0, =0.1.1, =0.0.2, =0.6.0, =0.1.0, =1.3.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.3.1, =0.4.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2020-0167...

5.4AI score

SaveExploits0

vulnersOsv•added 2020/06/16 3:58 p.m.•3 views

abrute (>=0.1.7, <=0.1.9), alipay-rs (>=0.2.0, <=0.4.6) +94 more potentially affected by CVE-2020-35884 via tiny_http (>=0.4.1, <=0.7.0)

tinyhttp CARGO version =0.4.1, =0.1.7, =0.2.0, =0.0.1, =0.14.0, =0.1.0, =0.1.0, =0.0.1, =0.1.0, =1.0.0, =0.1.5, =0.1.1, =0.15.7, =0.1.0, =0.1.0, =0.1.17 and more Source cves: CVE-2020-35884 Source advisory: SNYK:RUST-TINYHTTP-573057...

6.5CVSS5.3AI score0.01065EPSS

SaveExploits0

vulnersOsv•added 2020/06/05 7:38 p.m.•3 views

@aerogear/apollo-voyager-keycloak (>=0.1.0, <=0.2.7-rc3), @aerogear/apollo-voyager-server (>=0.1.0, <=0.2.7-rc3) +132 more potentially affected by unknown CVE via apollo-server-core (>=2.0.0, <=2.12.0)

apollo-server-core NPM version =2.0.0, =0.1.0, =0.1.0, =0.3.0-SNAPSHOT1, =0.5.0-rc1, =0.3.0-SNAPSHOT1, =0.5.2-dev1, =2018.8.28-0, =0.5.1-alpha.0, =2.11.0, =3.9.0, =2.2.0-alpha.1, =2.3.10, =1.0.0, =2.0.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-W42G-7VFC-XF37...

5.4AI score

SaveExploits0

vulnersOsv•added 2020/06/05 2:29 p.m.•3 views

cd-core (>=0.0.3, <=0.0.11) potentially affected by CVE-2020-7675 via cd-messenger (2.7.12)

cd-messenger NPM version 2.7.12 is affected by a known vulnerability. The following packages have a transitive dependency on cd-messenger and may be impacted: - cd-core =0.0.3, =0.0.11 Source cves: CVE-2020-7675 Source advisory: SNYK:JS-CDMESSENGER-571493...

9.8CVSS8.6AI score0.02512EPSS

SaveExploits1

vulnersOsv•added 2020/05/19 12:00 p.m.•3 views

a2 (>=0.5.0-alpha.6, <=0.5.0-alpha.7), azure_sdk_auth_aad (>=0.30.0, <=0.35.0) +19 more potentially affected by CVE-2020-35875 via tokio-rustls (>=0.12.0-alpha.1, <=0.12.0-alpha.8)

tokio-rustls CARGO version =0.12.0-alpha.1, =0.5.0-alpha.6, =0.30.0, =0.30.0, =0.30.0, =0.30.0, =0.30.0, =0.30.0, =0.30.0, =0.30.0, =0.1.0-alpha.1, =0.1.0, =0.30.0, =3.2.2, =3.4.2 and more Source cves: CVE-2020-35875 Source advisory: OSV:RUSTSEC-2020-0019...

7.5CVSS7.4AI score0.01336EPSS

SaveExploits0

vulnersOsv•added 2020/05/14 3:34 p.m.•3 views

babel-plugin-transform-cssobj (3.0.2), cssobj-converter (>=2.1.2, <=2.4.3) +5 more potentially affected by unknown CVE via objutil (>=2.0.2, <=2.17.4)

objutil NPM version =2.0.2, =2.1.2, =1.0.1, =1.0.0, =0.0.5, =0.0.21 Source cves: unknown CVE Source advisory: SNYK:JS-OBJUTIL-559496...

5.4AI score

SaveExploits0

vulnersOsv•added 2020/05/11 8:00 p.m.•3 views

@enhavo/form (>=0.1.2, <=0.8.5), @enhavo/translation (>=0.8.4, <=0.8.5) +22 more potentially affected by CVE-2019-1010091 via tinymce (>=5.0.6, <=5.2.1)

tinymce NPM version =5.0.6, =0.1.2, =0.8.4, =0.18.0, =15.0.1, =0.0.46, =0.0.14, =1.0.11-beta.17, =1.0.0, =1.0.1, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.6 and more Source cves: CVE-2019-1010091 Source advisory: OSV:GHSA-C78W-2GW7-GJV3...

6.1CVSS6.2AI score0.01917EPSS

SaveExploits1

vulnersOsv•added 2020/05/11 8:00 p.m.•3 views

@angular-materials/ngx-admin (>=1.0.0, <=1.0.1), @ec.components/tinymce (>=0.5.7, <=0.6.0) +37 more potentially affected by CVE-2019-1010091 via tinymce (>=4.5.1, <=4.9.8)

tinymce NPM version =4.5.1, =1.0.0, =0.5.7, =0.1.1, =0.0.13, =1.3.0, =8.0.0, =0.8.8, =0.6.3, =1.2.0, =1.0.0-alpha.0, =1.1.0, =2.2.0 - common-library 0.0.0 - connectwise-manager 10.0.0 and more Source cves: CVE-2019-1010091 Source advisory: OSV:GHSA-C78W-2GW7-GJV3...

6.1CVSS6.2AI score0.01917EPSS

SaveExploits1

vulnersOsv•added 2020/05/04 12:00 p.m.•3 views

abacuz (>=0.1.0, <=0.1.1), acick (>=0.1.0-alpha.0, <=0.2.0) +2656 more potentially affected by unknown CVE via stdweb (>=0.1.3, <=0.4.20)

stdweb CARGO version =0.1.3, =0.1.0, =0.1.0-alpha.0, =0.1.0-alpha.0, =0.1.0-alpha.0, =0.1.0-alpha.0, =0.1.1-alpha.0, =1.0.0, =0.8.0, =0.8.0, =0.1.0, =0.1.41, =0.4.0, =0.4.2 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2020-0056...

5.4AI score

SaveExploits0

vulnersOsv•added 2020/05/02 12:00 p.m.•3 views

a3mo_lib (>=0.1.0, <=0.1.1), aaa_csv_challenge (0.1.0) +6417 more potentially affected by CVE-2019-25010 +1 more via failure (>=0.1.0, <=0.1.8)

failure CARGO version =0.1.0, =0.1.0, =0.0.1, =0.1.0-pre.1, =0.5.0, =0.3.0, =0.3.0-alpha.1, =0.1.0, =0.2.0-alpha.2 - accept-encoding-fork 0.2.0-alpha.3 and more Source cves: CVE-2019-25010, CVE-2020-25575 Source advisory: OSV:RUSTSEC-2020-0036...

9.8CVSS8.5AI score0.02874EPSS

SaveExploits1

vulnersOsv•added 2020/04/30 5:16 p.m.•3 views

@aconex/styleguide (>=2.0.1, <=2.2.0), @acornfamily/site (>=1.1.0, <=1.3.0) +1350 more potentially affected by CVE-2017-1000048 via qs (>=6.2.0, <=6.2.1)

qs NPM version =6.2.0, =2.0.1, =1.1.0, =0.1.0, =0.0.0, =0.7.15, =0.0.0, =1.0.23, =1.0.10, =3.3.91, =0.0.0, =0.1.0, =1.2.17, =0.5.6, =0.5.7 and more Source cves: CVE-2017-1000048 Source advisory: OSV:GHSA-GQGV-6JQ5-JJJ9...

7.5CVSS6.6AI score0.02395EPSS

SaveExploits0

vulnersOsv•added 2020/04/16 3:14 a.m.•3 views

@01/service-core (1.2.1), @adyen/api-library (>=2.0.0, <=2.1.5) +349 more potentially affected by unknown CVE via https-proxy-agent (>=2.0.0, <=2.2.2)

https-proxy-agent NPM version =2.0.0, =2.0.0, =3.9.0-alpha.0, =0.1.0, =0.1.0, =2.0.3, =2.1.3 - @back4app/ant 0.0.19 - @back4app/ant-cli 0.0.19 - @back4app/ant-core 0.0.19 - @back4app/ant-graphql 0.0.19 - @back4app/ant-graphql-express 0.0.19 - @back4app/ant-serverless 0.0.19 and more Source cves:...

5.4AI score

SaveExploits0

vulnersOsv•added 2020/04/05 12:00 a.m.•3 views

@10yun/cv-mobile-ui (0.3.20), @aiot-toolkit/aiotpack (>=2.0.5-beta.11, <=2.0.5-widget-provider-beta.2) +184 more potentially affected by CVE-2020-7636 via adb-driver (>=0.0.1, <=0.1.8)

adb-driver NPM version =0.0.1, =2.0.5-beta.11, =1.0.0-beta.0, =1.0.0-beta.0, =2.0.0-26820200330001, =2.0.0-27520200518001, =2.0.0-26920200420001, =0.1.0, =1.0.0, =1.9.3, =1.9.3, =0.4.0-beta.0, =2.1.0 and more Source cves: CVE-2020-7636 Source advisory: SNYK:JS-ADBDRIVER-564430...

9.8CVSS8.5AI score0.04358EPSS

SaveExploits1

vulnersOsv•added 2020/04/03 9:48 p.m.•3 views

@21epub/resource-lib (>=1.0.0, <=1.0.3), @alex_xu/xdb (0.1.0-snapshot.41) +260 more potentially affected by unknown CVE via acorn (>=6.0.0, <=6.4.0)

acorn NPM version =6.0.0, =1.0.0, =2018.10.14-0, =2018.10.14-0, =0.8.0, =4.0.0-alpha.0, =4.0.0, =0.0.1, =0.1.0, =1.0.0, =3.0.0-pr.8, =12.1.0, =0.1.6, =1.0.0, =1.1.8 and more Source cves: unknown CVE Source advisory: OSV:GHSA-6CHW-6FRG-F759...

5.4AI score

SaveExploits0

vulnersOsv•added 2020/04/02 12:00 a.m.•3 views

@pho-nomenal/5-minute-github-demo (>=6.0.3, <=21.5.1), eject-media (>=0.0.1, <=0.0.2) +2 more potentially affected by CVE-2020-7628 via umount (1.1.6)

umount NPM version 1.1.6 is affected by a known vulnerability. The following packages have a transitive dependency on umount and may be impacted: - @pho-nomenal/5-minute-github-demo =6.0.3, =0.0.1, =0.1.1, =1.1.0, =1.1.4 Source cves: CVE-2020-7628 Source advisory: SNYK:JS-UMOUNT-564265...

9.8CVSS7.6AI score0.01788EPSS

SaveExploits0

vulnersOsv•added 2020/04/02 12:00 a.m.•3 views

compare-eslint-config (>=0.1.0, <=0.1.1) potentially affected by CVE-2020-7629 via install-package (0.1.0)

install-package NPM version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on install-package and may be impacted: - compare-eslint-config =0.1.0, =0.1.1 Source cves: CVE-2020-7629 Source advisory: SNYK:JS-INSTALLPACKAGE-564267...

9.8CVSS8.6AI score0.04221EPSS

SaveExploits1

vulnersOsv•added 2020/04/01 12:00 a.m.•3 views

@4players/odin-bot-sdk (>=0.1.0, <=0.4.4), @bhznjns/node-mp3-player (>=1.0.0, <=1.3.3) +39 more potentially affected by CVE-2020-7615 via fsa (>=0.3.1, <=0.5.1)

fsa NPM version =0.3.1, =0.1.0, =1.0.0, =1.0.0, =0.0.5, =0.0.1, =1.0.0, =0.0.1, =0.0.2-3, =1.2.2, =0.1.0, =1.0.4, =0.1.0, =0.1.0, =1.0.0, =2.0.0 - chiasenhac-music-bot 1.0.0 and more Source cves: CVE-2020-7615 Source advisory: SNYK:JS-FSA-564118...

7.8CVSS7.4AI score0.01139EPSS

SaveExploits1

vulnersOsv•added 2020/03/16 4:35 p.m.•3 views

@absolunet/ioc (2.0.0), @absolunet/nwayo-workflow (>=3.7.2, <=3.8.1) +885 more potentially affected by CVE-2020-7608 via yargs-parser (>=16.0.0, <=18.1.0)

yargs-parser NPM version =16.0.0, =3.7.2, =6.0.4, =1.0.0, =1.0.2, =1.0.6, =1.4.0-alpha.1, =1.19.6, =1.0.0, =5.0.0, =2.0.0-beta.2, =2.0.0-beta.2, =2.3.2 and more Source cves: CVE-2020-7608 Source advisory: SNYK:JS-YARGSPARSER-560381...

5.3CVSS6.8AI score0.00514EPSS

SaveExploits1

vulnersOsv•added 2020/03/16 4:35 p.m.•3 views

00.demo (1.0.0), 02vue_toast_demo (>=1.0.0, <=1.0.4) +39571 more potentially affected by CVE-2020-7608 via yargs-parser (>=6.0.1, <=13.1.1)

yargs-parser NPM version =6.0.1, =1.0.0, =1.0.0, =8.3.5, =0.1.0, =0.0.1, =0.0.2 - 23g-base-css 1.0.0 and more Source cves: CVE-2020-7608 Source advisory: SNYK:JS-YARGSPARSER-560381...

5.3CVSS6.8AI score0.00514EPSS

SaveExploits1

vulnersOsv•added 2020/03/16 4:35 p.m.•3 views

another-work-report-generator (>=3.4.1, <=3.4.5), largest-package (>=5.0.0, <=8.0.0) +5 more potentially affected by CVE-2020-7608 via yargs-parser (5.0.0-security.0)

yargs-parser NPM version 5.0.0-security.0 is affected by a known vulnerability. The following packages have a transitive dependency on yargs-parser and may be impacted: - another-work-report-generator =3.4.1, =5.0.0, =1.1.0, =0.1.0, =4.13.5, =0.7.25, =0.7.26 - yargs 7.1.1 Source cves: CVE-2020-76...

5.3CVSS6.8AI score0.00514EPSS

SaveExploits1

vulnersOsv•added 2020/03/13 9:49 a.m.•3 views

sulu-file-system-view-prompt-here (>=1.0.2, <=1.0.4) potentially affected by CVE-2020-7602 via node-prompt-here (1.0.1)

node-prompt-here NPM version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on node-prompt-here and may be impacted: - sulu-file-system-view-prompt-here =1.0.2, =1.0.4 Source cves: CVE-2020-7602 Source advisory: SNYK:JS-NODEPROMPTHERE-560115...

9.8CVSS5.3AI score0.02619EPSS

SaveExploits1

vulnersOsv•added 2020/02/28 11:56 a.m.•3 views

@concepto/eb (>=1.1.7, <=1.1.95), @concepto/nuxt (1.9.427) +11 more potentially affected by CVE-2019-10804 via serial-number (>=0.3.0, <=1.3.0)

serial-number NPM version =0.3.0, =1.1.7, =0.0.1, =1.9.35, =1.1.0, =1.1.1, =0.2.1, =0.1.4, =0.1.1, =0.1.24, =2.5.0, =3.1.1 Source cves: CVE-2019-10804 Source advisory: SNYK:JS-SERIALNUMBER-559010...

9.8CVSS8.6AI score0.02836EPSS

SaveExploits1

vulnersOsv•added 2020/02/28 9:12 a.m.•3 views

@550w-tools/cli (>=0.0.14, <=0.0.16), @550w-tools/core (>=0.0.14, <=0.0.16) +540 more potentially affected by CVE-2020-7710 via safe-eval (>=0.2.0, <=0.4.1)

safe-eval NPM version =0.2.0, =0.0.14, =0.0.14, =0.0.13, =0.0.14, =0.0.15, =1.0.1, =1.0.2, =1.0.3, =1.1.2, =0.1.16-beta.1, =1.0.0-beta.4, =0.3.0-alpha.1, =0.20.0, =2.0.295, =2.0.315 and more Source cves: CVE-2020-7710 Source advisory: SNYK:JS-SAFEEVAL-608076...

9.8CVSS8.6AI score0.0143EPSS

SaveExploits1

vulnersOsv•added 2020/02/18 8:51 a.m.•3 views

@zambezi/jsbin (3.40.4-ez-bin.5), pin-api (>=1.1.0, <=1.3.1) potentially affected by CVE-2019-10795 via undefsafe (>=2.0.0, <=2.0.1)

undefsafe NPM version =2.0.0, =1.1.0, =1.3.1 Source cves: CVE-2019-10795 Source advisory: SNYK:JS-UNDEFSAFE-548940...

6.5CVSS6.4AI score0.01089EPSS

SaveExploits1

vulnersOsv•added 2020/02/10 12:00 p.m.•3 views

aart (>=0.1.0, <=0.1.1), advancedresearch-higher_order_point (>=0.1.0, <=0.3.0) +684 more potentially affected by unknown CVE via lzw (>=0.5.0, <=0.10.0)

lzw CARGO version =0.5.0, =0.1.0, =0.1.0, =0.0.3, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.11.0, =0.2.0, =0.1.0, =0.6.0, =0.15.3 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2020-0144...

5.4AI score

SaveExploits0

vulnersOsv•added 2020/02/04 2:15 p.m.•3 views

chhyun-utils (>=1.0.12, <=1.0.39), jotunheimr (>=1.11.0, <=1.12.1) +4 more potentially affected by CVE-2019-10788 via im-metadata (>=2.1.1, <=3.0.1)

im-metadata NPM version =2.1.1, =1.0.12, =1.11.0, =1.0.0-rc.1, =0.0.1, =2.0.2, =2.0.3 - wn-s3-uploader 1.0.0 Source cves: CVE-2019-10788 Source advisory: SNYK:JS-IMMETADATA-544184...

9.8CVSS8.6AI score0.02415EPSS

SaveExploits1

vulnersOsv•added 2020/01/30 9:22 p.m.•3 views

@enhavo/form (>=0.1.2, <=0.8.5), @enhavo/translation (>=0.8.4, <=0.8.5) +14 more potentially affected by CVE-2020-17480 via tinymce (>=5.0.6, <=5.1.0)

tinymce NPM version =5.0.6, =0.1.2, =0.8.4, =0.18.0, =15.0.1, =1.0.0, =1.0.1, =1.0.0, =1.0.0, =1.0.0, =2.4.3, =1.0.0, =2.14.3, =1.2.3, =2.2.81 and more Source cves: CVE-2020-17480 Source advisory: OSV:GHSA-27GM-GHR9-4V95...

6.1CVSS6.1AI score0.01248EPSS

SaveExploits1

vulnersOsv•added 2020/01/06 6:44 p.m.•3 views

10er10 (0.23.0), 1405-authtokens (>=1.0.1, <=1.0.5) +3112 more potentially affected by CVE-2016-1000236 via cookie-signature (>=1.0.0, <=1.0.3)

cookie-signature NPM version =1.0.0, =1.0.1, =0.0.1, =0.0.1, =1.0.1, =0.25.0, =1.0.4, =1.0.6 - @axerunners/p2pool-scanner 0.0.2 - @azu/api-mock 1.0.0 - @bear-fe/dbl 1.0.8 and more Source cves: CVE-2016-1000236 Source advisory: OSV:GHSA-92VM-WFM5-MXVV...

4.4CVSS6.8AI score0.00896EPSS

SaveExploits0

vulnersOsv•added 2020/01/06 5:07 p.m.•3 views

@choiceform/ui-foundation (>=0.16.3, <=0.16.6), @gulpjs/update-template (0.1.0) +15 more potentially affected by CVE-2019-10776 via git-diff-apply (>=0.0.5, <=0.22.1)

git-diff-apply NPM version =0.0.5, =0.16.3, =0.1.0, =0.1.0, =0.8.0, =0.1.9, =0.0.1, =0.7.1, =0.2.2, =0.2.3 - ember-precondition 0.2.0 - ember-promise-helpers 1.0.8 and more Source cves: CVE-2019-10776 Source advisory: SNYK:JS-GITDIFFAPPLY-540774...

9.8CVSS8.6AI score0.02147EPSS

SaveExploits1

vulnersOsv•added 2019/12/30 7:30 p.m.•3 views

bem-register (>=1.0.0, <=1.0.5), itstep_server (0.0.1) +4 more potentially affected by CVE-2019-10758 via mongo-express (>=0.19.0, <=0.53.0)

mongo-express NPM version =0.19.0, =1.0.0, =0.1.1, =1.0.0, =1.5.0, =1.6.1 Source cves: CVE-2019-10758 Source advisory: OSV:GHSA-H47J-HC6X-H3QQ...

9.9CVSS8.5AI score0.84845EPSS

SaveExploits3

vulnersOsv•added 2019/12/13 3:39 p.m.•3 views

@alexbp-ds/microservice-wrapper (1.1.8), @apifie/node-microservice (>=0.0.1, <=1.0.3) +81 more potentially affected by CVE-2019-16777 via npm (>=6.0.0, <=6.13.2)

npm NPM version =6.0.0, =0.0.1, =0.1.2, =0.4.3, =1.0.0-beta.0, =1.0.0-beta.15, =1.1.58, =3.2.2, =2.0.0, =0.0.1, =3.0.0, =4.0.0, =4.0.1 and more Source cves: CVE-2019-16777 Source advisory: OSV:GHSA-4328-8HGF-7WJR...

7.7CVSS7AI score0.02026EPSS

SaveExploits0

vulnersOsv•added 2019/12/13 3:39 p.m.•3 views

@alexbp-ds/microservice-wrapper (1.1.8), @apifie/node-microservice (>=0.0.1, <=1.0.3) +81 more potentially affected by CVE-2019-16776 via npm (>=6.0.0, <=6.13.2)

8.1CVSS7.5AI score0.03412EPSS

SaveExploits0

vulnersOsv•added 2019/12/06 8:40 p.m.•3 views

@achil/parcel-bundler (>=1.11.1, <=1.12.34), @acies/core (>=1.2.89, <=1.2.215) +134 more potentially affected by CVE-2019-10769 via safer-eval (>=1.2.3, <=1.3.6)

safer-eval NPM version =1.2.3, =1.11.1, =1.2.89, =0.1.0, =4.0.0, =4.1.0, =4.1.2, =0.9.2-pre.41, =2.0.2-pre.3, =1.0.0, =1.9.3-ext.1, =0.3.0, =1.12.3, =1.0.0, =0.0.1, =3.4.4 and more Source cves: CVE-2019-10769 Source advisory: SNYK:JS-SAFEREVAL-534901...

9.8CVSS8.5AI score0.02595EPSS

SaveExploits1

vulnersOsv•added 2019/12/04 9:25 p.m.•3 views

@pl-test/c (>=1.1.0, <=1.1.1), @pl-test/e (1.1.0) potentially affected by CVE-2019-19507 via jpv (2.0.1)

jpv NPM version 2.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on jpv and may be impacted: - @pl-test/c =1.1.0, =1.1.1 - @pl-test/e 1.1.0 Source cves: CVE-2019-19507 Source advisory: OSV:GHSA-RH46-3FGC-MVRF...

5.3CVSS5.7AI score0.00974EPSS

SaveExploits1

vulnersOsv•added 2019/11/13 12:00 p.m.•3 views

a3mo_lib (>=0.1.0, <=0.1.1), aaa_csv_challenge (0.1.0) +6417 more potentially affected by CVE-2019-25010 +1 more via failure (>=0.1.0, <=0.1.8)

9.8CVSS8.5AI score0.02874EPSS

SaveExploits1

vulnersOsv•added 2019/10/15 8:06 p.m.•3 views

@magento/upward-spec (>=2.0.0-rc.19, <=3.0.0), @nowtilus/nemo-lib (>=0.3.0, <=0.3.3) +18 more potentially affected by CVE-2019-17592 via csv-parse (>=4.0.0, <=4.4.5)

csv-parse NPM version =4.0.0, =2.0.0-rc.19, =0.3.0, =5.4.0, =0.3.0, =3.3.1, =5.4.0-RC1, =1.0.35, =0.6.2, =2.1.0-beta.2939, =4.2.3, =0.0.1, =0.1.4, =0.44.1, =0.48.7 and more Source cves: CVE-2019-17592 Source advisory: OSV:GHSA-582F-P4PG-XC74...

7.5CVSS7.3AI score0.02276EPSS

SaveExploits0

vulnersOsv•added 2019/10/04 5:56 p.m.•3 views

@agoric/ertp (>=0.0.1, <=0.1.4), @agoric/marshal (>=0.0.1, <=0.1.0) +9 more potentially affected by unknown CVE via ses (>=0.0.1, <=0.5.3)

ses NPM version =0.0.1, =0.0.1, =0.0.1, =0.0.16, =0.0.0, =0.0.0, =0.0.0, =0.0.0, =0.0.4, =0.6.0, =0.0.0, =0.0.19 Source cves: unknown CVE Source advisory: OSV:GHSA-6JG8-7333-554W...

5.4AI score

SaveExploits0

vulnersOsv•added 2019/09/11 11:02 p.m.•3 views

@agrc/helpers (>=1.0.0, <=1.0.1), @dojo/interop (>=4.0.0-alpha.1, <=7.0.0) +3 more potentially affected by CVE-2010-2273 via dojo (1.13.0)

dojo NPM version 1.13.0 is affected by a known vulnerability. The following packages have a transitive dependency on dojo and may be impacted: - @agrc/helpers =1.0.0, =4.0.0-alpha.1, =0.1.10, =0.1.12 - dijit 1.13.0 - dojox 1.13.0 Source cves: CVE-2010-2273 Source advisory: OSV:GHSA-536Q-8GXX-M782...

4.3CVSS8.5AI score0.04545EPSS

SaveExploits2

vulnersOsv•added 2019/07/19 4:13 p.m.•3 views

1508-cli (>=1.0.0, <=1.0.6), 1k (>=0.0.1, <=0.0.11) +9569 more potentially affected by CVE-2019-1010266 via lodash (>=4.7.0, <=4.17.10)

lodash NPM version =4.7.0, =1.0.0, =0.0.1, =0.0.2, =0.1.1, =1.0.0, =0.1.0, =0.0.1, =0.2.1, =0.0.2, =0.0.7, =0.4.20, =1.0.0-beta.1, =1.0.6 - @36node/template-service 0.3.5 and more Source cves: CVE-2019-1010266 Source advisory: OSV:GHSA-X5RQ-J2XG-H7QM...

6.5CVSS6.3AI score0.03076EPSS

SaveExploits1

vulnersOsv•added 2019/07/10 7:45 p.m.•3 views

@anjuna/charts (>=1.0.0-preview.45, <=1.0.0-preview.47), @badgeup/badgeup-browser-client (>=0.3.0, <=3.0.0) +186 more potentially affected by CVE-2019-10744 via lodash.defaultsdeep (>=4.3.2, <=4.6.0)

lodash.defaultsdeep NPM version =4.3.2, =1.0.0-preview.45, =0.3.0, =0.1.0, =0.3.0, =6.0.2, =1.0.0-rc.1, =1.2.0, =1.0.0, =0.9.16, =0.0.1, =0.275.1-chore-update-deps.3894.0, =0.18.2-alpha.1, =3.0.0, =6.8.1, =7.1.11 and more Source cves: CVE-2019-10744 Source advisory: OSV:GHSA-JF85-CPCP-J695...

9.1CVSS7.6AI score0.05006EPSS

SaveExploits3

vulnersOsv•added 2019/07/10 7:45 p.m.•3 views

10by10-react-app (1.2.1), 1508-cli (>=1.0.0, <=1.0.6) +13133 more potentially affected by CVE-2019-10744 via lodash (>=4.0.0, <=4.17.11)

lodash NPM version =4.0.0, =1.0.0, =0.0.1, =1.0.0, =0.0.2, =0.1.1, =1.0.0, =0.2.0, =0.1.0, =0.1.0, =0.0.1, =0.2.1, =0.0.2, =0.0.4 - 9wares-react 0.0.2 - @0x663/readclass 1.1.0 and more Source cves: CVE-2019-10744 Source advisory: OSV:GHSA-JF85-CPCP-J695...

9.1CVSS7.6AI score0.05006EPSS

SaveExploits3

vulnersOsv•added 2019/06/20 6:22 p.m.•3 views

@cidroy/frappe-gantt (0.8.2), @hatchloyalty/hatch-lab (>=1.0.2, <=1.0.6) +47 more potentially affected by CVE-2018-21270 via stringstream (>=0.0.4, <=0.0.5)

stringstream NPM version =0.0.4, =1.0.2, =0.1.0, =1.0.3-beta, =1.1.2, =1.0.0, =1.0.0, =1.0.2 and more Source cves: CVE-2018-21270 Source advisory: OSV:GHSA-MF6X-7MM4-X2G7...

6.5CVSS7AI score0.03638EPSS

SaveExploits1

vulnersOsv•added 2019/06/20 2:32 p.m.•3 views

@amcorvi/loadout (>=0.0.0, <=0.1.2), @amory/clean (>=2018.8.13-0, <=2018.8.13-2) +152 more potentially affected by unknown CVE via esm (>=3.0.14, <=3.0.84)

esm NPM version =3.0.14, =0.0.0, =2018.8.13-0, =2018.8.13-0, =2018.8.9-0, =2018.10.14-0, =2018.10.16-0, =2018.8.13-0, =2018.10.14-0, =2018.10.12-0, =2018.8.8-0, =2018.8.13-0, =0.4.1, =2.1.0-beta.0, =2.2.0-beta.1, =2.1.0-beta.0, =2.3.0-beta.10 and more Source cves: unknown CVE Source advisory:...

5.4AI score

SaveExploits0

Total number of security vulnerabilities5000