Skip to content
OpenAdvisories

Archive

31 May 2018

Vulnerabilities first published on this day (UTC), newest first.

← April 2018 2018 / May /31 June 2018 →
  1. 131
  2. 263
  3. 313
  4. 435
  5. 55
  6. 64
  7. 719
  8. 829
  9. 9105
  10. 1049
  11. 1125
  12. 127
  13. 134
  14. 1450
  15. 1537
  16. 1628
  17. 17139
  18. 1831
  19. 1938
  20. 204
  21. 2113
  22. 2263
  23. 2332
  24. 2455
  25. 2546
  26. 2617
  27. 27 
  28. 2811
  29. 2980
  30. 3030
  31. 31101
All Critical High Medium Low Exploited only Public exploit

15 results · Clear filters · Feed

  • Medium 5.4
    CVE-2018-1496

    IBM Content Navigator 2.0.3, 3.0.0, 3.0.1, 3.0.2, and 3.0.3 is vulnerable to cross-site scripting. This vulnerability a…

    IBM Content Navigator
  • Medium 4.3
    CVE-2018-1532

    IBM API Connect 5.0.0.0 through 5.0.8.2 does not properly update the SESSIONID with each request, which could allow a u…

    IBM API Connect
  • Medium —
    CVE-2015-9236

    Incorrect handling of CORS preflight request headers in hapi

    Hapi versions less than 11.0.0 implement CORS incorrectly and allowed for configurations that at best returned inconsistent headers and at worst allowed cross-origin activities that were expected to be forbidden. If the connection has CORS enabled but one rou…

    HackerOne hapi node module hapi npm
  • Medium —
    CVE-2016-10543

    Route Validation Bypass in call

    call is an HTTP router that is primarily used by the hapi framework. There exists a bug in call versions 2.0.1-3.0.1 that does not validate empty parameters, which could result in invalid input bypassing the route validation rules.

    HackerOne call node module call npm
  • Medium —
    CVE-2016-10526

    grunt-gh-pages before 0.10.0 may allow unencrypted GitHub credentials to be written to a log file

    A common setup to deploy to gh-pages on every commit via a CI system is to expose a github token to ENV and to use it directly in the auth part of the url. In module versions < 0.9.1 the auth portion of the url is outputted as part of the grunt tasks logging …

    HackerOne grunt-gh-pages node module grunt-gh-pages npm
  • Medium —
    CVE-2016-10528

    Directory Traversal in restafary

    restafary is a REpresentful State Transfer API for Creating, Reading, Using, Deleting files on a server from the web. Restafary before 1.6.1 is able to set up a root path, which should only allow it to run inside of that root path it specified.

    HackerOne restafary node module restafary npm
  • Medium —
    CVE-2016-10519

    Remote Memory Disclosure in bittorrent-dht

    A security issue was found in bittorrent-dht before 5.1.3 that allows someone to send a specific series of messages to a listening peer and get it to reveal internal memory.

    HackerOne bittorrent-dht node module bittorrent-dht npm
  • Medium 5.9
    CVE-2016-10536

    Insecure Defaults Allow MITM Over TLS in engine.io-client

    engine.io-client is the client for engine.io, the implementation of a transport-based cross-browser/cross-device bi-directional communication layer for Socket.IO. The vulnerability is related to the way that node.js handles the `rejectUnauthorized` setting. I…

    HackerOne engine.io-client node module engine.io-client npm
  • Medium —
    CVE-2016-10554

    SQL Injection in sequelize

    sequelize is an Object-relational mapping, or a middleman to convert things from Postgres, MySQL, MariaDB, SQLite and Microsoft SQL Server into usable data for NodeJS. Before version 1.7.0-alpha3, sequelize defaulted SQLite to use MySQL backslash escaping, ev…

    HackerOne sequelize node module sequelize npm
  • Medium —
    CVE-2016-10561

    Directory Traversal in bitty

    Bitty is a development web server tool that functions similar to `python -m SimpleHTTPServer`. Version 0.2.10 has a directory traversal vulnerability that is exploitable via the URL path in GET requests.

    HackerOne bitty node module bitty npm
  • Medium 6.1
    CVE-2016-10531

    Sanitization bypass using HTML Entities in marked

    marked is an application that is meant to parse and compile markdown. Due to the way that marked 0.3.5 and earlier parses input, specifically HTML entities, it's possible to bypass marked's content injection protection (`sanitize: true`) to inject a `javascri…

    HackerOne marked node module marked node-marked Debian Ubuntu npm
  • Medium —
    CVE-2016-10530

    Insecure Default Configuration in airbrake

    The airbrake module 0.3.8 and earlier defaults to sending environment variables over HTTP. Environment variables can often times contain secret keys and other sensitive values. A malicious user could be on the same network as a regular user and intercept all …

    HackerOne airbrake node module airbrake npm
  • Medium 5.4
    CVE-2016-10537

    Cross-Site Scripting in backbone

    backbone is a module that adds in structure to a JavaScript heavy application through key-value pairs and custom events connecting to your RESTful API through JSON There exists a potential Cross Site Scripting vulnerability in the `Model#Escape` function of b…

    HackerOne backbone node module backbone backbone Debian npm
  • Medium —
    CVE-2016-10547

    Cross-Site Scripting in nunjucks

    Nunjucks is a full featured templating engine for JavaScript. Versions 2.4.2 and lower have a cross site scripting (XSS) vulnerability in autoescape mode. In autoescape mode, all template vars should automatically be escaped. By using an array for the keys, s…

    HackerOne nunjucks node module nunjucks npm
  • Medium 6.1
    CVE-2018-11627

    Sinatra Cross-site Scripting vulnerability

    Sinatra before 2.0.2 has XSS via the 400 Bad Request page that occurs upon a params parser exception.

    sinatra ruby-sinatra Ubuntu RubyGems