Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

Response Splitting

🗓️ 24 Sep 2018 08:49:10Reported by Veracode Vulnerability DatabaseType 
veracode
 veracode🔗 sca.analysiscenter.veracode.com👁 28 Views

node.js response splitting vulnerability due to mishandling unicode character

Related
Detection
Refs
ReporterTitlePublishedViews
Family
IBM Security Bulletins		Security Bulletin: Multiple vulnerabilities in the IBM SDK for Node.js affect the Cordova tools in IBM Rational Application Developer (CVE-2016-2086, CVE-2016-2216, CVE-2015-3197)
5 Feb 202000:09
–ibm
IBM Security Bulletins		Security Bulletin: Multiple vulnerabilities in the IBM SDK for Node.js affect the Cordova tools in Rational Application Developer affecting Rational Developer for i and Rational Developer for AIX and Linux (CVE-2016-2086, CVE-2016-2216, CVE-2015-3197)
3 Aug 201804:23
–ibm
IBM Security Bulletins		Security Bulletin: Multiple vulnerabilities in OpenSSL affect Rational Software Architect and Rational Software Architect for WebSphere Software
10 Sep 202017:03
–ibm
IBM Security Bulletins		Security Bulletin: Vulnerabilities in IBM SDK for Node.js affect IBM Business Process Manager Configuration Editor
15 Jun 201807:05
–ibm
IBM Security Bulletins		Security Bulletin: Multiple vulnerabilities in current releases of IBM® SDK for Node.js™
9 Aug 201804:20
–ibm
IBM Security Bulletins		Security Bulletin: Multiple vulnerabilities in current releases of IBM® SDK for Node.js™ in IBM Bluemix (CVE-2015-3197, CVE-2016-2086, CVE-2016-2216)
9 Aug 201804:20
–ibm
Apple		About the security content of Xcode 8.1
27 Oct 201600:00
–apple
Apple		About the security content of Xcode 8.1 - Apple Support
23 Jan 201705:36
–apple
CNVD		Joyent Node.js HTTP Response Splitting Attack Vulnerability
23 Feb 201600:00
–cnvd
CVE		CVE-2016-2216
7 Apr 201621:00
–cve
Rows per page
Vulners
Node
nodenodeRange0.10.0–0.10.41js
OR
nodenodeRange0.11.0–0.12.9js
OR
nodenodeRange4.0.0–4.2.6js
OR
nodenodeRange5.0.0–5.5.0js
OR
nodejsnode.jsRange4.0.0–4.2.3js
OR
nodejsnode.jsRange5.0.0–5.3.0js
OR
nodejsnode.jsRange0.12.0–0.12.7js
OR
nodejsnode.jsRange0.10.21–0.10.36js

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
15 May 2019 06:18Current
7.4High risk
Vulners AI Score7.4
CVSS 24.3
CVSS 37.5
EPSS0.01835
node.jsresponse splittingvulnerabilityunicode charactersattack
28