CVEs published in May 2018
1,213 vulnerabilities, 158 critical, 7 exploited.
- fortinet fortiauthenticator A cross-site scripting (XSS) vulnerability in Fortinet FortiAuthenticator in versions 4.0.0 to... 6.1 Medium
- ibm api connect IBM API Connect 5.0.0.0 through 5.0.8.2 does not properly update the SESSIONID with each request,... 4.3 Medium
- ibm content navigator IBM Content Navigator 2.0.3, 3.0.0, 3.0.1, 3.0.2, and 3.0.3 is vulnerable to cross-site scripting... 5.4 Medium
- gitlab An issue was discovered in GitLab Community Edition (CE) and Enterprise Edition (EE) before 10.5... 6.1 Medium
- multidots woo checkout for digital goods An issue was discovered in the MULTIDOTS Woo Checkout for Digital Goods plugin 2.1 for WordPress.... 6.5 Medium
- multidots add social share messenger buttons whatsapp and viber An issue was discovered in the MULTIDOTS Add Social Share Messenger Buttons Whatsapp and Viber... 6.5 Medium
- rondaful project m1 wristband smart band 1 firmware Rondaful M1 Wristband Smart Band 1 devices allow remote attackers to send an arbitrary number of... 4.3 Medium
- mongodb-instance project mongodb-instance, hackerone mongodb-instance node module +1 more Downloads Resources over HTTP in mongodb-instance 8.1 High
- bkjs-wand project bkjs-wand, hackerone bkjs-wand node module +1 more Downloads Resources over HTTP in bkjs-wand 8.1 High
- embedza project embedza, hackerone embedza node module +1 more Downloads Resources over HTTP in embedza 8.1 High
- cnpmjs operadriver, hackerone operadriver node module +1 more Downloads Resources over HTTP in operadriver 8.1 High
- apk-parser project apk-parser, hackerone apk-parser node module +1 more Downloads Resources over HTTP in apk-parser 8.1 High
- ipfs go-ipfs-dep, hackerone go-ipfs-dep node module +1 more Downloads Resources over HTTP in go-ipfs-dep 8.1 High
- iedriver project iedriver, hackerone iedriver node module +1 more Downloads Resources over HTTP in iedriver 8.1 High
- bitty project bitty, hackerone bitty node module +1 more Directory Traversal in bitty 5.3 Medium
- galenframework galenframework-cli, hackerone galenframework-cli node module +1 more Downloads Resources over HTTP in galenframework-cli 8.1 High
- appium appium-chromedriver, hackerone appium-chromedriver node module +1 more appium-chromedriver downloads Resources over HTTP 8.1 High
- jwt-simple project jwt-simple, hackerone jwt-simple node module +1 more Forgeable Public/Private Tokens in jwt-simple 6.5 Medium
- sequelizejs sequelize, hackerone sequelize node module +1 more SQL Injection in sequelize 9.8 Critical
- sequelizejs sequelize, hackerone sequelize node module +1 more Potential SQL Injection in sequelize 9.8 Critical
- infragistics igniteui, hackerone igniteui node module +1 more Resources Downloaded over Insecure Protocol in igniteui 7.4 High
- sequelizejs sequelize, hackerone sequelize node module +1 more SQL Injection in sequelize 9.8 Critical
- sailsjs sails, hackerone sails node module +1 more Sails before 0.12.7 vulnerable to Broken CORS 4.4 Medium
- hackerone reduce-css-calc node module, reduce-css-calc project reduce-css-calc +1 more Arbitrary Code Injection in reduce-css-calc 6.1 Medium
- mozilla nunjucks, hackerone nunjucks node module +1 more Cross-Site Scripting in nunjucks 6.1 Medium
- pouchdb, hackerone pouchdb node module +1 more Arbitrary Code Injection in pouchdb 9.8 Critical
- uws project uws, hackerone uws node module +1 more Denial of Service in uws 5.9 Medium
- call project call, hackerone call node module +1 more Route Validation Bypass in call 5.3 Medium
- ws project ws, hackerone ws node module +1 more DoS due to excessively large websocket message in ws 7.5 High
- shell-quote project shell-quote, hackerone shell-quote node module +1 more Potential Command Injection in shell-quote 9.8 Critical
- minimatch project minimatch, hackerone minimatch node module +1 more Regular Expression Denial of Service in minimatch 7.5 High
- negotiator project negotiator, hackerone negotiator node module +1 more Regular Expression Denial of Service in negotiator 7.5 High
- cli project cli, debian linux, hackerone cli node module +2 more Arbitrary File Write in cli 3.5 Low
- backbone project backbone, hackerone backbone node module +1 more Cross-Site Scripting in backbone 5.4 Medium
- socket engine.io-client, hackerone engine.io-client node module +1 more Insecure Defaults Allow MITM Over TLS in engine.io-client 5.9 Medium
- csrf-lite project csrf-lite, hackerone csrf-lite node module +1 more Timing Attack in csrf-lite 5.9 Medium
- electron-packager project electron-packager, hackerone electron-packager node module +1 more SSL Validation Defaults to False in electron-packager 5.9 Medium
- express-restify-mongoose project express-restify-mongoose, hackerone express-restify-mongoose node module +1 more Private Data Disclosure in express-restify-mongoose 8.8 High
- console-io project console-io, hackerone console-io node module +1 more Authentication Bypass in console-io 9.8 Critical
- marked project marked, hackerone marked node module +1 more Sanitization bypass using HTML Entities in marked 6.1 Medium
- airbrake, hackerone airbrake node module +1 more Insecure Default Configuration in airbrake 5.9 Medium
- droppy project droppy, hackerone droppy node module +1 more No CSRF Validation in droppy 8.8 High
- restafary project restafary, hackerone restafary node module +1 more Directory Traversal in restafary 4.9 Medium
- riot.js riot-compiler, hackerone riot-compiler node module +1 more Regular Expression Denial of Service in riot-compiler 7.5 High
- grunt-gh-pages project grunt-gh-pages, hackerone grunt-gh-pages node module +1 more grunt-gh-pages before 0.10.0 may allow unencrypted GitHub credentials to be written to a log file 8.6 High
- i18n-node-angular project i18n-node-angular, hackerone i18n-node-angular node module +1 more Denial of Service and Content Injection in i18n-node-angular 8.2 High
- mqtt-packet project mqtt-packet, hackerone mqtt-packet node module +1 more Denial of Service in mqtt-packet 7.5 High
- jshamcrest project jshamcrest, hackerone jshamcrest node module +1 more Regular Expression Denial of Service in jshamcrest 7.5 High
- jadedown project jadedown, hackerone jadedown node module +1 more Regular Expression Denial of Service in jadedown 7.5 High
- webtorrent bittorrent-dht, hackerone bittorrent-dht node module +1 more Remote Memory Disclosure in bittorrent-dht 7.5 High
- Show olderLoading…