Node.js

16 results · Feed

• Unscored —
  CVE-2018-12121 EPSS 10%

  Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Denial of Service with large HTTP headers: B…

  The Node.js Project Node.js nodejs nodejs Debian Ubuntu Alpine
  Nov 28, 2018
• Unscored —
  CVE-2018-12123

  Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Hostname spoofing in URL parser for javascri…

  The Node.js Project Node.js nodejs nodejs Debian Ubuntu Alpine
  Nov 28, 2018
• Unscored —
  CVE-2018-12120

  Node.js: All versions prior to Node.js 6.15.0: Debugger port 5858 listens on any interface by default: When the debugge…

  The Node.js Project Node.js nodejs Debian
  Nov 28, 2018
• Unscored —
  CVE-2018-12122 EPSS 41%

  Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Slowloris HTTP Denial of Service: An attacke…

  The Node.js Project Node.js nodejs nodejs Debian Ubuntu Alpine
  Nov 28, 2018
• Unscored —
  CVE-2018-12116

  Node.js: All versions prior to Node.js 6.15.0 and 8.14.0: HTTP request splitting: If Node.js can be convinced to use un…

  The Node.js Project Node.js nodejs nodejs Debian Ubuntu Alpine
  Nov 28, 2018
• Unscored —
  CVE-2018-7166

  In all versions of Node.js 10 prior to 10.9.0, an argument processing flaw can cause `Buffer.alloc()` to return uniniti…

  The Node.js Project Node.js
  Aug 21, 2018
• Unscored —
  CVE-2018-12115

  In all versions of Node.js prior to 6.14.4, 8.11.4 and 10.9.0 when used with UCS-2 encoding (recognized by Node.js unde…

  The Node.js Project Node.js nodejs nodejs Debian Ubuntu Alpine
  Aug 21, 2018
• Unscored —
  CVE-2018-7164

  Node.js versions 9.7.0 and later and 10.x are vulnerable and the severity is MEDIUM. A bug introduced in 9.7.0 increase…

  The Node.js Project Node.js nodejs Debian
  Jun 13, 2018
• Unscored —
  CVE-2018-7162

  All versions of Node.js 9.x and 10.x are vulnerable and the severity is HIGH. An attacker can cause a denial of service…

  The Node.js Project Node.js nodejs Debian
  Jun 13, 2018
• Unscored —
  CVE-2018-7161

  All versions of Node.js 8.x, 9.x, and 10.x are vulnerable and the severity is HIGH. An attacker can cause a denial of s…

  The Node.js Project Node.js nodejs nodejs Debian Ubuntu Alpine
  Jun 13, 2018
• Unscored —
  CVE-2018-7167

  Calling Buffer.fill() or Buffer.alloc() with some parameters can lead to a hang which could result in a Denial of Servi…

  The Node.js Project Node.js nodejs nodejs Debian Ubuntu Alpine
  Jun 13, 2018
• Unscored —
  CVE-2018-7158

  The `'path'` module in the Node.js 4.x release line contains a potential regular expression denial of service (ReDoS) v…

  The Node.js Project Node.js nodejs nodejs Debian Ubuntu Alpine
  May 17, 2018
• Unscored —
  CVE-2018-7159

  The HTTP parser in all current versions of Node.js ignores spaces in the `Content-Length` header, allowing input such a…

  The Node.js Project Node.js nodejs nodejs Debian Ubuntu Alpine
  May 17, 2018
• Unscored —
  CVE-2018-7160

  The Node.js inspector, in 6.x and later is vulnerable to a DNS rebinding attack which could be exploited to perform rem…

  The Node.js Project Node.js nodejs nodejs Debian Ubuntu Alpine
  May 17, 2018
• Unscored —
  CVE-2017-15897

  Node.js had a bug in versions 8.X and 9.X which caused buffers to not be initialized when the encoding for the fill val…

  The Node.js Project Node.js nodejs nodejs-current Alpine
  Dec 11, 2017
• Unscored —
  CVE-2017-15896

  Node.js was affected by OpenSSL vulnerability CVE-2017-3737 in regards to the use of SSL_read() due to TLS handshake fa…

  The Node.js Project Node.js nodejs nodejs-current Alpine
  Dec 11, 2017