Lucene search
+L
VulnersosvRecent

10909 matches found

vulnersOsv
vulnersOsv
•added 2021/01/13 6:21 p.m.•2 views

@dmrvos/infrajs (>=0.0.4, <=0.0.8), @marjose/jstoolkit (>=0.0.2, <=1.0.0-beta) +10 more potentially affected by CVE-2021-21252 via jquery-validation (>=1.14.0, <=1.19.1)

jquery-validation NPM version =1.14.0, =0.0.4, =0.0.2, =0.2.2, =3.0.0, =0.11.28, =0.0.8, =1.4.0, =1.0.0, =3.0.0-prerelease.20170216T120000Z, =1.0.0, =1.0.6 - webpack-symfony-builder 1.0.0 Source cves: CVE-2021-21252 Source advisory: OSV:GHSA-JXWX-85VP-GVWM...

7.5CVSS5.4AI score0.03437EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2021/01/12 12:00 p.m.•1 views

buf (>=0.1.0, <=0.2.1), i-o (>=0.1.0, <=0.4.1) +2 more potentially affected by CVE-2021-25907 via containers (>=0.1.1, <=0.8.5)

containers CARGO version =0.1.1, =0.1.0, =0.1.0, =0.13.0, =0.14.1 - lude 0.1.0 Source cves: CVE-2021-25907 Source advisory: OSV:RUSTSEC-2021-0010...

9.8CVSS5.3AI score0.01552EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2021/01/10 12:00 p.m.•1 views

amethyst (>=0.11.0, <=0.15.3), amethyst-console (0.1.0) +22 more potentially affected by CVE-2021-25902 via glsl-layout (0.3.2)

glsl-layout CARGO version 0.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on glsl-layout and may be impacted: - amethyst =0.11.0, =0.2.0, =0.1.0, =0.6.0, =0.6.0, =0.6.0, =0.4.0, =0.6.0, =0.1.0, =0.2.0, =0.1.0, =0.6.0, =0.15.3 and more Source cves:...

7.5CVSS7.4AI score0.0139EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2021/01/10 12:00 p.m.•2 views

basic_dsp (>=0.4.0, <=0.8.2) potentially affected by CVE-2021-25906 via basic_dsp_matrix (>=0.4.3, <=0.8.1)

basicdspmatrix CARGO version =0.4.3, =0.4.0, =0.8.2 Source cves: CVE-2021-25906 Source advisory: OSV:RUSTSEC-2021-0009...

7.5CVSS7.4AI score0.01327EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2021/01/08 5:08 p.m.•1 views

@11ty/eleventy (0.3.3), @36node/swagen (0.1.2) +2021 more potentially affected by CVE-2021-23369 via handlebars (>=4.0.0, <=4.7.6)

handlebars NPM version =4.0.0, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =1.0.1, =0.4.0, =3.0.0-dev.1, =1.0.0, =0.1.0, =0.0.1, =0.0.1, =1.0.2-alpha.0, =1.0.0, =1.2.1 and more Source cves: CVE-2021-23369 Source advisory: SNYK:JS-HANDLEBARS-1056767...

9.8CVSS6.8AI score0.07028EPSS
SaveExploits2
vulnersOsv
vulnersOsv
•added 2021/01/08 12:00 p.m.•2 views

blkar (7.2.7), prcn_lib (0.3.1) +1 more potentially affected by CVE-2021-25900 via smallvec (>=1.0.0, <=1.2.0)

smallvec CARGO version =1.0.0, =0.1.0, =0.1.1 Source cves: CVE-2021-25900 Source advisory: OSV:RUSTSEC-2021-0003...

9.8CVSS8.5AI score0.01666EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2021/01/08 12:00 p.m.•1 views

tract-linalg (>=0.5.7, <=0.5.8) potentially affected by CVE-2021-25900 via smallvec (0.6.13)

smallvec CARGO version 0.6.13 is affected by a known vulnerability. The following packages have a transitive dependency on smallvec and may be impacted: - tract-linalg =0.5.7, =0.5.8 Source cves: CVE-2021-25900 Source advisory: OSV:RUSTSEC-2021-0003...

9.8CVSS8.5AI score0.01666EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2021/01/08 8:30 a.m.•1 views

@11ty/eleventy (0.3.3), @36node/swagen (0.1.2) +2021 more potentially affected by CVE-2021-23383 via handlebars (>=4.0.0, <=4.7.6)

handlebars NPM version =4.0.0, =1.16.0, =1.16.0, =1.16.0, =1.16.0, =1.0.1, =0.4.0, =3.0.0-dev.1, =1.0.0, =0.1.0, =0.0.1, =0.0.1, =1.0.2-alpha.0, =1.0.0, =1.2.1 and more Source cves: CVE-2021-23383 Source advisory: SNYK:JS-HANDLEBARS-1279029...

9.8CVSS6.8AI score0.04506EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2021/01/07 12:00 p.m.•2 views

a2d (>=0.1.0, <=0.1.11), acidalia (>=0.1.0, <=0.1.3) +203 more potentially affected by CVE-2021-45689 via gfx-auxil (>=0.1.0, <=0.10.0)

gfx-auxil CARGO version =0.1.0, =0.1.0, =0.1.0, =0.0.1, =0.1.2, =0.1.0, =0.5.4-rc.1, =0.1.3, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.0 and more Source cves: CVE-2021-45689 Source advisory: OSV:RUSTSEC-2021-0091...

9.8CVSS8.5AI score0.01191EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2021/01/07 12:00 p.m.•3 views

av-codec (>=0.1.0, <=0.2.1), av-format (>=0.1.0, <=0.3.0) +3 more potentially affected by CVE-2021-25904 via av-data (>=0.1.0, <=0.2.2)

av-data CARGO version =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.2.1 - libaom 0.2.0 - libvpx 0.1.0 Source cves: CVE-2021-25904 Source advisory: OSV:RUSTSEC-2021-0007...

7.5CVSS7.4AI score0.01327EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2021/01/07 12:00 p.m.•4 views

a2d (>=0.1.0, <=0.1.11), acidalia (>=0.1.0, <=0.1.3) +280 more potentially affected by CVE-2021-45688 via ash (>=0.24.4, <=0.32.1)

ash CARGO version =0.24.4, =0.1.0, =0.1.0, =0.0.1, =0.1.2, =0.1.0, =0.5.4-rc.1, =0.2.0, =0.1.0, =0.1.3, =0.1.4 - aravis-utils 0.7.0 and more Source cves: CVE-2021-45688 Source advisory: OSV:RUSTSEC-2021-0090...

9.8CVSS8.5AI score0.01345EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2021/01/06 7:27 p.m.•2 views

@agentlab/ldkg-ui-react (>=0.1.7, <=0.1.12), @belvoly-vue-aioa/tinymce (>=0.1.6, <=0.1.9) +56 more potentially affected by CVE-2024-21911 via tinymce (>=5.0.6, <=5.5.1)

tinymce NPM version =5.0.6, =0.1.7, =0.1.6, =0.0.1, =9.0.0-alpha.5, =0.1.2, =0.8.4, =0.18.0, =0.0.1-alpha.9, =15.0.1, =1.2.2, =0.17.0, =0.1.0, =0.0.1, =0.0.4 - @yanghp/amis 1.1.0 and more Source cves: CVE-2024-21911 Source advisory: OSV:GHSA-W7JX-J77M-WP65...

6.1CVSS6.1AI score0.01165EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2021/01/06 7:25 p.m.•7 views

@agentlab/ldkg-ui-react (>=0.1.7, <=0.1.12), @belvoly-vue-aioa/tinymce (>=0.1.6, <=0.1.9) +56 more potentially affected by unknown CVE via tinymce (>=5.0.6, <=5.5.1)

tinymce NPM version =5.0.6, =0.1.7, =0.1.6, =0.0.1, =9.0.0-alpha.5, =0.1.2, =0.8.4, =0.18.0, =0.0.1-alpha.9, =15.0.1, =1.2.2, =0.17.0, =0.1.0, =0.0.1, =0.0.4 - @yanghp/amis 1.1.0 and more Source cves: unknown CVE Source advisory: OSV:GHSA-H96F-FC7C-9R55...

5.4AI score
SaveExploits0
vulnersOsv
vulnersOsv
•added 2021/01/06 1:17 p.m.•2 views

@scullyio/init (1.0.0-beta.4), @scullyio/scully-plugin-google-analytics (>=1.0.0-beta.0, <=1.0.0) potentially affected by CVE-2020-28470 via @scullyio/scully (1.0.0-beta.5)

@scullyio/scully NPM version 1.0.0-beta.5 is affected by a known vulnerability. The following packages have a transitive dependency on @scullyio/scully and may be impacted: - @scullyio/init 1.0.0-beta.4 - @scullyio/scully-plugin-google-analytics =1.0.0-beta.0, =1.0.0 Source cves: CVE-2020-28470...

7.3CVSS6.6AI score0.00825EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2021/01/06 12:00 p.m.•5 views

financ (>=0.1.0, <=0.3.0), fitparser (>=0.1.0, <=0.5.1) +16 more potentially affected by CVE-2021-26951 via calamine (>=0.11.8, <=0.16.2)

calamine CARGO version =0.11.8, =0.1.0, =0.1.0, =1.0.0, =0.2.0, =0.15.0, =0.11.0, =0.21.0, =0.16.0, =0.1.0, =0.1.0, =0.1.0, =1.0.0, =1.0.1 and more Source cves: CVE-2021-26951 Source advisory: OSV:RUSTSEC-2021-0015...

9.8CVSS8.5AI score0.01728EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2021/01/05 12:00 p.m.•3 views

agnes (>=0.3.0, <=0.3.2), automl (>=0.2.6, <=0.2.7) +1 more potentially affected by CVE-2021-45686 via csv-sniffer (0.1.1)

csv-sniffer CARGO version 0.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on csv-sniffer and may be impacted: - agnes =0.3.0, =0.2.6, =0.1.7, =0.1.8 Source cves: CVE-2021-45686 Source advisory: OSV:RUSTSEC-2021-0088...

9.8CVSS8.5AI score0.01191EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2021/01/05 10:32 a.m.•2 views

chewb-server (>=0.0.1, <=0.0.20), video-dash-uploader (>=0.0.1, <=0.0.4) +1 more potentially affected by CVE-2020-28436 via google-cloudstorage-commands (0.0.1)

google-cloudstorage-commands NPM version 0.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on google-cloudstorage-commands and may be impacted: - chewb-server =0.0.1, =0.0.1, =0.0.1, =0.0.2 Source cves: CVE-2020-28436 Source advisory:...

9.8CVSS8.6AI score0.00936EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2021/01/04 8:59 p.m.•1 views

-lidonghui (1.0.0), -tompan-reacttemplate (>=1.0.1, <=1.1.0) +51439 more potentially affected by CVE-2020-28168 via axios (>=0.1.0, <=0.21.0)

axios NPM version =0.1.0, =1.0.1, =1.0.1, =1.0.0, =1.0.1 - 03-asenkronsdasdsadavehttprequest 1.0.0 - 04-17 1.0.0 - 04-17zy 1.0.0 - 04-a 1.0.0 - 04-code 1.0.0 - 05-clima-mundo 1.0.0 - 0726react 0.1.1 - 0a 1.0.0 - 0c 1.0.0 and more Source cves: CVE-2020-28168 Source advisory: OSV:GHSA-4W2V-Q235-VP9...

5.9CVSS6.8AI score0.02348EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2021/01/04 12:00 p.m.•7 views

ifinfo (0.1.0), prosafe_exporter (>=0.1.1, <=0.2.7) potentially affected by unknown CVE via interfaces2 (0.0.5)

interfaces2 CARGO version 0.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on interfaces2 and may be impacted: - ifinfo 0.1.0 - prosafeexporter =0.1.1, =0.2.7 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2021-0002...

5.4AI score
SaveExploits0
vulnersOsv
vulnersOsv
•added 2021/01/04 12:00 p.m.•3 views

endian_trait_derive (>=0.2.0, <=0.4.0) potentially affected by CVE-2021-29929 via endian_trait (>=0.2.0, <=0.3.0)

endiantrait CARGO version =0.2.0, =0.2.0, =0.4.0 Source cves: CVE-2021-29929 Source advisory: OSV:RUSTSEC-2021-0039...

7.5CVSS7.4AI score0.01135EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2021/01/04 12:00 p.m.•1 views

bellperson (>=0.3.4, <=0.15.0), ff-cl-gen (>=0.1.0, <=0.3.0) +10 more potentially affected by CVE-2021-25908 via fil-ocl (0.19.6)

fil-ocl CARGO version 0.19.6 is affected by a known vulnerability. The following packages have a transitive dependency on fil-ocl and may be impacted: - bellperson =0.3.4, =0.1.0, =5.0.0, =5.0.0, =2.3.0, =0.1.0, =0.1.0, =5.0.0, =5.4.0, =5.0.0, =5.0.0, =0.1.1, =0.1.2 Source cves: CVE-2021-25908...

7.5CVSS5.3AI score0.01327EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2021/01/04 12:00 p.m.•1 views

mdbook-cat-prep (>=1.0.0, <=1.0.8), mdbook-curly-quotes (0.3.0) +24 more potentially affected by CVE-2020-26297 via mdbook (>=0.2.3, <=0.3.7)

mdbook CARGO version =0.2.3, =1.0.0, =0.4.0, =0.0.1, =0.1.0, =0.1.0, =0.2.3, =0.2.0, =1.0.0, =0.1.0, =0.1.0, =0.1.1 and more Source cves: CVE-2020-26297 Source advisory: OSV:RUSTSEC-2021-0001...

8.2CVSS6.2AI score0.01254EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2021/01/03 12:00 p.m.•1 views

bronzedb (0.1.0), bronzedb-client (>=0.1.0, <=0.1.1) +3 more potentially affected by CVE-2021-45682 via bronzedb-protocol (0.1.0)

bronzedb-protocol CARGO version 0.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on bronzedb-protocol and may be impacted: - bronzedb 0.1.0 - bronzedb-client =0.1.0, =0.1.1 - bronzedb-memory-db-server 0.1.0 - bronzedb-server 0.1.0 -...

9.8CVSS5.3AI score0.01191EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2021/01/03 12:00 p.m.•2 views

binjs_es6 (0.2.1) potentially affected by CVE-2021-45683 via binjs_io (0.2.1)

binjsio CARGO version 0.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on binjsio and may be impacted: - binjses6 0.2.1 Source cves: CVE-2021-45683 Source advisory: OSV:RUSTSEC-2021-0085...

9.8CVSS8.5AI score0.01191EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2020/12/31 12:00 p.m.•3 views

hina (>=0.0.1, <=0.1.3) potentially affected by CVE-2020-36511 via bite (0.0.5)

bite CARGO version 0.0.5 is affected by a known vulnerability. The following packages have a transitive dependency on bite and may be impacted: - hina =0.0.1, =0.1.3 Source cves: CVE-2020-36511 Source advisory: OSV:RUSTSEC-2020-0153...

7.5CVSS7.4AI score0.01059EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2020/12/30 11:40 p.m.•1 views

@accordproject/cicero-cli (>=0.3.4, <=0.21.27-20210409091004), @accordproject/cicero-common (>=0.3.4, <=0.3.12) +455 more potentially affected by CVE-2020-26291 via urijs (>=1.16.1, <=1.19.3)

urijs NPM version =1.16.1, =0.3.4, =0.3.4, =0.3.4, =0.3.4, =0.4.5-20180705184508, =0.11.2-20190326183124, =0.10.2-20190213145246, =0.0.5-20190507210024, =0.71.8-20190915045234, =0.80.2-20190926121100, =0.80.4-20191003231621, =0.61.2-20190916200303, =0.90.1-20200514190616, =0.6.0-alpha.0,...

6.5CVSS6.9AI score0.0169EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2020/12/30 11:09 p.m.•2 views

@foretold/components (>=0.0.4, <=0.0.6), @qzchenwl/jupyterlab_voyager (>=0.1.0, <=0.1.6) +11 more potentially affected by CVE-2020-26296 via vega (>=5.0.0, <=5.17.2)

vega NPM version =5.0.0, =0.0.4, =0.1.0, =0.11.4, =1.0.3-alpha.5, =0.0.2, =0.0.5, =2.4.0, =1.0.0, =0.9.0, =1.0.0, =5.0.0-rc1, =5.17.2 Source cves: CVE-2020-26296 Source advisory: OSV:GHSA-R2QC-W64X-6J54...

8.7CVSS7.8AI score0.01693EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2020/12/29 5:06 p.m.•2 views

@bartificer/human-join (>=1.0.0, <=1.0.1), @frdl/custom-require (>=0.0.0, <=0.0.12) +43 more potentially affected by unknown CVE via node-ini (1.0.0)

node-ini NPM version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on node-ini and may be impacted: - @bartificer/human-join =1.0.0, =0.0.0, =5.0.5, =0.0.3, =1.0.1, =1.1.0, =0.0.0, =0.1.0, =0.0.0, =1.1.1, =0.0.1, =0.0.2, =0.0.3 - chowder 0.0.1 and...

5.4AI score
SaveExploits0
vulnersOsv
vulnersOsv
•added 2020/12/27 3:50 p.m.•2 views

@aeonlabs/vue-model-viewer (>=0.0.1, <=0.0.67), @artefacts.tech/vue-model-viewer (>=0.0.1, <=0.0.2) +21 more potentially affected by CVE-2020-28478 via gsap (>=3.0.4, <=3.5.1)

gsap NPM version =3.0.4, =0.0.1, =0.0.1, =1.1.3-alpha1, =0.0.100, =0.0.4, =0.2.10, =0.0.1-alpha.2, =1.0.0, =0.0.0, =1.1.51, =1.1.55, =0.0.12, =0.0.22, =0.0.23 and more Source cves: CVE-2020-28478 Source advisory: SNYK:JS-GSAP-1054614...

7.5CVSS7.1AI score0.016EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2020/12/27 12:00 p.m.•1 views

kari (0.1.0), soos-sample-project (1.0.1) potentially affected by CVE-2020-36513 +1 more via acc_reader (2.0.0)

accreader CARGO version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on accreader and may be impacted: - kari 0.1.0 - soos-sample-project 1.0.1 Source cves: CVE-2020-36513, CVE-2020-36514 Source advisory: OSV:RUSTSEC-2020-0155...

9.8CVSS5.3AI score0.01191EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2020/12/25 12:00 p.m.•2 views

bigbang (>=0.0.6, <=0.0.9), bruteforus (0.1.0) +8 more potentially affected by CVE-2020-36463 via multiqueue (0.3.2)

multiqueue CARGO version 0.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on multiqueue and may be impacted: - bigbang =0.0.6, =0.1.0, =0.1.8, =0.1.0, =0.1.0, =0.2.0, =0.2.0, =0.1.6, =0.2.0, =0.5.0 Source cves: CVE-2020-36463 Source advisory:...

8.1CVSS7.8AI score0.01098EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2020/12/25 11:08 a.m.•4 views

@csnext/cs-timeline (>=0.0.101-beta.22, <=0.0.132-beta.446), @net7/components (>=3.0.2-rc.2, <=4.3.2) +4 more potentially affected by CVE-2020-28487 via vis-timeline (>=7.1.3, <=7.4.2)

vis-timeline NPM version =7.1.3, =0.0.101-beta.22, =3.0.2-rc.2, =2.0.0-alpha2, =1.3.0, =3.1.1-build1667201258, =3.1.2 Source cves: CVE-2020-28487 Source advisory: SNYK:JS-VISTIMELINE-1063500...

6.8CVSS6.6AI score0.01444EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2020/12/24 8:49 p.m.•2 views

@3wks/gae-node-nestjs (>=2.1.1, <=6.0.0-rc.0), @8sistemas/design-system (>=0.6.0-alpha.1, <=1.0.5) +892 more potentially affected by CVE-2020-26289 via date-and-time (>=0.3.0, <=0.14.1)

date-and-time NPM version =0.3.0, =2.1.1, =0.6.0-alpha.1, =0.0.38, =1.1.8, =4.2.0, =0.0.6, =3.6.0, =1.0.0, =0.0.0, =1.1.68, =1.4.3, =0.1.3, =0.1.0-master.20191004191703, =1.4.1-atomist.a260p86nh.typescript-version.master.20190915212851, =2.0.0-master.20200715122321 and more Source cves:...

7.5CVSS6.1AI score0.02146EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2020/12/22 12:00 p.m.•2 views

ahrightos-kernel (0.1.0), bootloader (>=0.10.0-alpha-01, <=0.10.13) +2 more potentially affected by CVE-2020-36208 via conquer-once (0.2.1)

conquer-once CARGO version 0.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on conquer-once and may be impacted: - ahrightos-kernel 0.1.0 - bootloader =0.10.0-alpha-01, =0.14.0, =0.1.0, =0.2.6 Source cves: CVE-2020-36208 Source advisory:...

7.8CVSS7.4AI score0.00428EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2020/12/22 12:00 p.m.•1 views

app (>=0.2.0, <=0.6.5), bench_timer (>=0.1.0, <=0.1.1) +2 more potentially affected by unknown CVE via stderr (>=0.2.2, <=0.8.0)

stderr CARGO version =0.2.2, =0.2.0, =0.1.0, =0.2.0, =0.1.0, =0.3.3 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2020-0109...

5.4AI score
SaveExploits0
vulnersOsv
vulnersOsv
•added 2020/12/21 4:04 p.m.•2 views

@abdullah2993/web-ext-webpack-plugin (>=1.1.0, <=1.1.1), @finsemble/finsemble-electron-adapter (5.0.0-bc-1) +9 more potentially affected by CVE-2020-7789 via node-notifier (8.0.0)

node-notifier NPM version 8.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on node-notifier and may be impacted: - @abdullah2993/web-ext-webpack-plugin =1.1.0, =15.0.0, =0.1.19-a2, =0.5.17-a10, =2.4.0, =0.0.38, =5.1.0, =5.4.1 - web-ext-build 0.0.12 -...

6.8CVSS6.9AI score0.01575EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2020/12/20 4:44 p.m.•3 views

eslint-plugin-mozilla (>=2.7.0, <=2.9.2), gatsby (>=2.24.6-telemetry-test.19, <=2.24.6-telemetry-test.20) +3 more potentially affected by CVE-2020-28448 +1 more via multi-ini (2.1.0)

multi-ini NPM version 2.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on multi-ini and may be impacted: - eslint-plugin-mozilla =2.7.0, =2.24.6-telemetry-test.19, =2.12.64-telemetry-test.19, =0.1.54-telemetry-test.19, =1.3.21-telemetry-test.19,...

9.8CVSS8.4AI score0.01517EPSS
SaveExploits2
vulnersOsv
vulnersOsv
•added 2020/12/20 12:00 p.m.•2 views

a_r_c_h_e_r_y (>=0.4.1, <=0.4.3), abci-storage (0.0.3) +1692 more potentially affected by unknown CVE via difference (>=0.4.1, <=2.0.0)

difference CARGO version =0.4.1, =0.4.1, =0.1.1, =0.1.0, =0.1.0, =4.1.0, =0.6.0, =0.1.0, =0.1.25, =2.0.0, =2.1.1 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2020-0095...

5.4AI score
SaveExploits0
vulnersOsv
vulnersOsv
•added 2020/12/18 10:51 p.m.•2 views

@adobe/helix-pipeline (>=6.2.3, <=11.2.3), @adpt/testutils (>=0.0.2-next.4, <=0.4.0-next.28) +70 more potentially affected by CVE-2020-26870 via dompurify (>=2.0.0, <=2.0.15)

dompurify NPM version =2.0.0, =6.2.3, =0.0.2-next.4, =1.0.0, =1.8.0-alpha.4373, =1.8.0-alpha.4373, =1.8.0-alpha.4373, =0.8.0-alpha.4373, =2.3.11, =1.12.1-7.alpha.1, =4.11.1-rc.8, =0.0.1, =5.0.0-m.6, =1.9.1, =2.0.31, =0.11.15, =0.12.2 and more Source cves: CVE-2020-26870 Source advisory:...

6.1CVSS6.6AI score0.04881EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2020/12/18 6:23 p.m.•3 views

3nit-utils (>=0.24.0, <=1.0.2), @36node/template-service (0.3.5) +577 more potentially affected by CVE-2020-35149 via mquery (>=3.0.0, <=3.2.2)

mquery NPM version =3.0.0, =0.24.0, =0.2.0, =3.7.0, =0.1.17, =1.0.0, =0.0.1, =0.0.2, =5.9.7, =0.7.0, =1.0.33, =2.1.3 and more Source cves: CVE-2020-35149 Source advisory: OSV:GHSA-45Q2-34RF-MR94...

5.3CVSS5.6AI score0.01028EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2020/12/18 12:00 p.m.•2 views

aoa (0.1.0), blinkrs (1.0.1) +31 more potentially affected by CVE-2020-36206 via rusb (>=0.4.0, <=0.6.5)

rusb CARGO version =0.4.0, =0.2.0, =0.6.0, =0.2.0, =0.1.0, =1.0.0-alpha.2, =0.1.0, =0.1.0, =0.4.0, =0.5.0, =0.1.0, =0.1.0, =0.1.1 and more Source cves: CVE-2020-36206 Source advisory: OSV:RUSTSEC-2020-0098...

7CVSS7.1AI score0.00285EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2020/12/17 9:00 p.m.•1 views

@mdslab/iotronic-lightning-rod (>=2.3.1, <=2.3.6), connection-test-table (>=0.1.0, <=0.1.3) +9 more potentially affected by CVE-2020-7781 via connection-tester (>=0.0.7, <=0.2.0)

connection-tester NPM version =0.0.7, =2.3.1, =0.1.0, =0.0.1, =0.0.1, =0.0.10, =1.1.3, =0.0.1, =0.0.1, =1.0.0, =0.0.1, =0.1.2 Source cves: CVE-2020-7781 Source advisory: OSV:GHSA-W5MP-8P8W-MHH8...

9.8CVSS8.6AI score0.01966EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2020/12/17 9:00 p.m.•1 views

@coreui/coreui-datatables (1.0.0), @daai/sb-decloud (>=1.0.0, <=1.0.11) +38 more potentially affected by CVE-2020-28458 via datatables.net (>=1.10.12, <=1.10.21)

datatables.net NPM version =1.10.12, =1.0.0, =1.0.0, =3.0.0, =1.1.1, =0.0.1, =1.0.2, =1.0.0, =1.0.0, =0.0.0, =0.1.56, =0.2.151 and more Source cves: CVE-2020-28458 Source advisory: OSV:GHSA-M7J4-FHG6-XF5V...

7.5CVSS6.3AI score0.0367EPSS
SaveExploits2
vulnersOsv
vulnersOsv
•added 2020/12/16 7:25 p.m.•1 views

@azteam/monitor (>=1.0.1, <=1.0.9), @best/builder (>=4.0.0-alpha10, <=4.0.0-beta9) +27 more potentially affected by CVE-2020-26274 via systeminformation (>=4.0.9, <=4.31.0)

systeminformation NPM version =4.0.9, =1.0.1, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =0.0.3, =1.1.0, =5.2.0, =5.2.1 and more Source cves: CVE-2020-26274 Source...

8.8CVSS8AI score0.02712EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2020/12/15 4:52 p.m.•2 views

netlify-plugin-cypress (>=1.0.2, <=1.3.3) potentially affected by CVE-2019-10775 via ecstatic (4.1.2)

ecstatic NPM version 4.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on ecstatic and may be impacted: - netlify-plugin-cypress =1.0.2, =1.3.3 Source cves: CVE-2019-10775 Source advisory: OSV:GHSA-JC84-3G44-WF2Q...

7.5CVSS5.3AI score0.01274EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2020/12/14 1:17 p.m.•6 views

@concord-consortium/cloud-file-manager (>=2.0.0-pre.1, <=2.3.1), @hat-core/juggler (>=0.4.0-dev20200410, <=0.4.1-dev20210707) +45 more potentially affected by unknown CVE via jiff (>=0.6.0, <=0.7.3)

jiff NPM version =0.6.0, =2.0.0-pre.1, =0.4.0-dev20200410, =0.5.1-dev20210809, =0.1.0, =1.0.0, =1.0.1, =0.0.3, =2.0.0, =1.0.0, =0.0.1, =0.5.5, =1.0.0-3, =1.0.0-0, =1.0.0, =1.1.2 and more Source cves: unknown CVE Source advisory: SNYK:JS-JIFF-1017118...

5.4AI score
SaveExploits0
vulnersOsv
vulnersOsv
•added 2020/12/14 7:40 a.m.•7 views

@patrick91/ghost (5.2.3-patrick.1), @tryghost/settings-path-manager (>=0.1.0, <=0.1.9) +10 more potentially affected by unknown CVE via props (>=0.2.4, <=0.3.0)

props NPM version =0.2.4, =0.1.0, =0.0.0, =0.0.1-alpha1, =0.0.0, =4.24.0, =0.0.4, =0.1.1, =0.1.0, =0.1.0, =0.1.11 Source cves: unknown CVE Source advisory: SNYK:JS-PROPS-1015750...

5.4AI score
SaveExploits0
vulnersOsv
vulnersOsv
•added 2020/12/13 10:36 a.m.•2 views

@jsmodules/storage (>=2.0.1, <=2.0.3), @snowmonkey/plugin-rxdb (0.0.3) potentially affected by CVE-2020-35149 via rxdb (>=9.6.0, <=9.7.1)

rxdb NPM version =9.6.0, =2.0.1, =2.0.3 - @snowmonkey/plugin-rxdb 0.0.3 Source cves: CVE-2020-35149 Source advisory: SNYK:JS-RXDB-1050985...

5.3CVSS5.6AI score0.01028EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2020/12/13 10:36 a.m.•1 views

3nit-utils (>=0.24.0, <=1.0.2), @36node/template-service (0.3.5) +577 more potentially affected by CVE-2020-35149 via mquery (>=3.0.0, <=3.2.2)

mquery NPM version =3.0.0, =0.24.0, =0.2.0, =3.7.0, =0.1.17, =1.0.0, =0.0.1, =0.0.2, =5.9.7, =0.7.0, =1.0.33, =2.1.3 and more Source cves: CVE-2020-35149 Source advisory: SNYK:JS-MQUERY-1050858...

5.3CVSS5.6AI score0.01028EPSS
SaveExploits0
vulnersOsv
vulnersOsv
•added 2020/12/11 5:44 p.m.•1 views

@azteam/monitor (>=1.0.1, <=1.0.9), @best/builder (>=4.0.0-alpha10, <=4.0.0-beta9) +27 more potentially affected by CVE-2020-26274 via systeminformation (>=4.0.9, <=4.31.0)

systeminformation NPM version =4.0.9, =1.0.1, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =4.0.0-alpha10, =0.0.3, =1.1.0, =5.2.0, =5.2.1 and more Source cves: CVE-2020-26274 Source...

8.8CVSS8AI score0.02712EPSS
SaveExploits0
Total number of security vulnerabilities10909