Skip to content
OpenAdvisories

Archive

December 2014

Vulnerabilities first published in this month (UTC), newest first.

1 result · Clear filters · Feed

  • High —
    CVE-2014-7192 Public exploit EPSS 13%

    Potential for Script Injection in syntax-error

    Eval injection vulnerability in index.js in the syntax-error package before 1.1.1 for Node.js 0.10.x, as used in IBM Rational Application Developer and other products, allows remote attackers to execute arbitrary code via a crafted file.