Archive
June 2018
Vulnerabilities first published in this month (UTC), newest first.
1,787 results · Feed
-
High 7.5
node-sqlite is malware
`node-sqlite` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
-
High 7.5
Directory Traversal in gomeplus-h5-proxy
`gomeplus-h5-proxy` is vulnerable to a directory traversal issue, allowing attackers to access any file in the system by placing '../' in the URL.
-
High 7.5
fabric-js is malware
`fabric-js` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
-
High —
ReDoS via long UserAgent header in useragent
Useragent is used to parse useragent headers. It uses several regular expressions to accomplish this. An attacker could edit their own headers, creating an arbitrarily long useragent string, causing the event loop and server to block. This affects Useragent 2…
-
High 7.5
d3.js is malware
`d3.js` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
-
Medium 6.5
Regular Expression Denial Of Service in uri-js
uri-js is a module that tries to fully implement RFC 3986. One of these features is validating whether or not a supplied URL is valid or not. To do this, uri-js uses a regular expression, This regular expression is vulnerable to redos. This causes the program…
-
High 7.5
Denial of Service via malformed accept-encoding header in hapi
hapi is a web and services application framework. When hapi >= 15.0.0 <= 16.1.0 encounters a malformed `accept-encoding` header an uncaught exception is thrown. This may cause hapi to crash or to hang the client connection until the timeout period is reached.
-
High 7.5
Directory Traversal in badjs-sourcemap-server
`badjs-sourcemap-server` receives files sent by `badjs-sourcemap`. `badjs-sourcemap-server` is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url.
-
High 7.5
sqliter is malware
`sqliter` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
-
Medium —
Cross-Site Scripting in sanitize-html
Sanitize-html is a library for scrubbing html input of malicious values. Versions 1.11.1 and below are vulnerable to cross site scripting (XSS) in certain scenarios: If allowed at least one nonTextTags, the result is a potential XSS vulnerability.
-
High —
XSS in Data URI in remarkable
Remarkable is a markdown parser. In versions 1.6.2 and lower, remarkable allows the use of `data:` URIs in links and can therefore execute javascript.
-
Critical 9.8
Unsafe eval() in summit allows arbitrary code execution
Summit is a node web framework. When using the PouchDB driver in the module, Summit 0.1.0 and later allows an attacker to execute arbitrary commands via the collection name.
-
High 7.5
jquery.js is malware
`jquery.js` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
-
High 7.5
node-fabric is malware
`node-fabric` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
-
High 7.5
nodesqlite is malware
`nodesqlite` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
-
High 8.1
gfe-sass downloads Resources over HTTP
gfe-sass is a library for promises (CommonJS/Promises/A,B,D) gfe-sass downloads resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resources with an attacker c…
-
Medium 6.1
Cross-Site Scripting in i18next
i18next is a language translation framework. Because of how the interpolation is implemented, making replacements from the dictionary one at a time, untrusted user input can use the name of one of the dictionary keys to inject script into the browser. This af…
-
Medium —
sqlite.js is malware
`sqlite.js` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
-
High 7.5
Insecure randomness in socket.io
Socket.io is a realtime application framework that provides communication via websockets. Because socket.io 0.9.6 and earlier depends on `Math.random()` to create socket IDs, the IDs are predictable. An attacker is able to guess the socket ID and gain access …
-
Medium 6.1
Cross-Site Scripting in forms
Forms is a library for easily creating HTML forms. Versions before 1.3.0 did not have proper html escaping. This means that if the application did not sanitize html on behalf of forms, use of forms may be vulnerable to cross site scripting
-
Medium 6.1
XSS via Angular Expression in ag-grid
ag-grid is an advanced data grid that is library agnostic. ag-grid is vulnerable to Cross-site Scripting (XSS) via Angular Expressions, if AngularJS is used in combination with ag-grid.
-
High —
ikst Downloads Resources over HTTP
ikst versions before 1.1.2 download resources over HTTP, which leaves it vulnerable to MITM attacks.
-
Unscored —
`mariadb` was a malicious module published with the intent to hijack environment variables. It has been unpublished by …
-
Medium —
Cross-Site Scripting in morris.js
Morris.js creates an svg graph, with labels that appear when hovering over a point. The hovering label names are not escaped in versions 0.5.0 and earlier. If control over the labels is obtained, script can be injected. The script will run on the client side …
-
Medium —
HTML Injection in shout
Shout is an IRC client. Because the `/topic` command in messages is unescaped, attackers have the ability to inject HTML scripts that will run in the victim's browser. Affects shout >=0.44.0 <=0.49.3.
-
Medium 6.1
Cross-Site Scripting (XSS) in restify
Restify is a framework for building REST APIs. Restify >=2.0.0 <=4.0.4 using URL encoded script tags in a non-existent URL, an attacker can get script to run in some browsers.
-
High —
Denial of Service in nes
Nes is a websocket extension library for hapi. Hapi is a webserver framework. Versions below and including 6.4.0 have a denial of service vulnerability via an invalid Cookie header. This is only present when websocket authentication is set to `cookie`. Submit…
-
Medium 5.9
Invalid Curve Attack in node-jose
node-jose is a JavaScript implementation of the JSON Object Signing and Encryption (JOSE) for current web browsers and node.js-based servers. node-jose earlier than version 0.9.3 is vulnerable to an invalid curve attack. This allows an attacker to recover the…
-
Medium 6.1
Cross-Site Scripting in gitbook
GitBook is a command line tool (and Node.js library) for building beautiful books using GitHub/Git and Markdown (or AsciiDoc). Stored Cross-Site-Scripting (XSS) is possible in GitBook before 3.2.2 by including code outside of backticks in any ebook. This code…
-
High 7.5
Header Forgery in http-signature
Http-signature is a "Reference implementation of Joyent's HTTP Signature Scheme". In versions <=0.9.11, http-signature signs only the header values, but not the header names. This makes http-signature vulnerable to header forgery. Thus, if an attacker can int…
-
Critical 9.8
Growl before 1.10.0 vulnerable to Command Injection
Growl adds growl notification support to nodejs. Growl before 1.10.2 does not properly sanitize input before passing it to exec, allowing for arbitrary command execution.
-
Medium 5.3
Cryptographically Weak PRNG in randomatic
react-native-meteor-oauth is a library for Oauth2 login to a Meteor server in React Native. The oauth Random Token is generated using a non-cryptographically strong RNG (Math.random()).
-
Unscored —CVE-2018-11715 Public exploit
The Recent Threads plugin before 1.1 for MyBB allows XSS via a thread subject.
-
High 8.6
IBM BigFix Platform 9.2 and 9.5 transmits sensitive or security-critical data in clear text in a communication channel …
-
Medium 6.8
IBM Connections 5.0, 5.5, and 6.0 could allow a remote attacker to conduct phishing attacks, using an open redirect att…
-
High —
Downloads Resources over HTTP in healthcenter
healthcenter - IBM Monitoring and Diagnostic Tools health Center agent healthcenter downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resourc…
-
High —
Downloads Resources over HTTP in sfml
sfml downloads resources over HTTP, which leaves it vulnerable to MITM attacks.
-
High —
Downloads Resources over HTTP in haxe-dev
haxe-dev is a cross-platform toolkit. haxe-dev downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested binary with an attacker controlled binary if…
-
High 8.1
ipip-coffee downloads Resources over HTTP
ipip-coffee queries geolocation information from IP ipip-coffee downloads geolocation resources over HTTP, which leaves it vulnerable to MITM attacks. This could impact the integrity and availability of the data being used to make geolocation decisions by an …
-
High —
Downloads Resources over HTTP in windows-seleniumjar-mirror
windows-seleniumjar-mirror downloads the Selenium Jar file windows-seleniumjar-mirror downloads binary resources over HTTP, which leaves it vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested resou…