CVEs published in June 2018
1,550 vulnerabilities, 195 critical, 3 exploited.
- ikst project ikst, hackerone ikst node module +1 moreikst Downloads Resources over HTTP5.9 Medium
- gfe-sass project gfe-sass, hackerone gfe-sass node module +1 moregfe-sass downloads Resources over HTTP8.1 High
- hftp project hftp, hackerone hftp node module +1 moreDirectory Traversal in hftp7.5 High
- f2e-server project f2e-server, hackerone f2e-server node module +1 moreDirectory Traversal in f2e-server7.5 High
- gomeplus-h5-proxy project gomeplus-h5-proxy, hackerone gomeplus-h5-proxy node module +1 moreDirectory Traversal in gomeplus-h5-proxy7.5 High
- badjs-sourcemap-server project badjs-sourcemap-server, hackerone badjs-sourcemap-server node module +1 moreDirectory Traversal in badjs-sourcemap-server7.5 High
- hubspot hubl-server, hackerone hubl-server node module +1 morehubl-server downloads resources over HTTP8.1 High
- socket socket.io, hackerone socket.io node module +1 moreInsecure randomness in socket.io7.5 High
- useragent project useragent, hackerone useragent node module +1 moreReDoS via long UserAgent header in useragent7.5 High
- hostr project hostr, hackerone hostr node module +1 moreDirectory Traversal in hostr7.5 High
- randomatic project randomatic, hackerone react-native-meteor-oauth node module +1 moreCryptographically Weak PRNG in randomatic5.3 Medium
- request project request, hackerone request node module +1 moreRemote Memory Exposure in request5.9 Medium
- hapijs nes, hackerone nes node module +1 moreDenial of Service in nes5.9 Medium
- sync-exec project sync-exec, hackerone sync-exec node module, nodejs node.js +2 moreTmp files readable by other users in sync-exec6.5 Medium
- decamelize project decamelize, hackerone decamelize node module +1 moreRegular Expression Denial of Service in decamelize7.5 High
- morris.js project morris.js, hackerone morris.js node module +1 moreCross-Site Scripting in morris.js6.1 Medium
- garycourt uri-js, hackerone uri-js node module +1 moreRegular Expression Denial Of Service in uri-js6.5 Medium
- summit project summit, hackerone summit node module +1 moreUnsafe eval() in summit allows arbitrary code execution9.8 Critical
- gitbook, hackerone gitbook node module +1 moreCross-Site Scripting in gitbook6.1 Medium
- restify, hackerone restify node module +1 moreCross-Site Scripting (XSS) in restify6.1 Medium
- punkave sanitize-html, hackerone sanitize-html node module +1 moreCross-Site Scripting in sanitize-html6.1 Medium
- punkave sanitize-html, hackerone sanitize-html node module +1 moreCross-Site Scripting in sanitize-html6.1 Medium
- forms project forms, hackerone forms node module +1 moreCross-Site Scripting in forms6.1 Medium
- http-proxy project http-proxy, hackerone http-proxy node module +1 moreInsufficient Error Handling in http-proxy7.5 High
- hapijs hapi, hackerone hapi node module +1 moreDenial of Service via malformed accept-encoding header in hapi7.5 High
- ag-grid, hackerone ag-grid node module +1 moreXSS via Angular Expression in ag-grid6.1 Medium
- i18next, hackerone i18next node module +1 moreCross-Site Scripting in i18next6.1 Medium
- cisco node-jose, hackerone node-jose node module +1 moreInvalid Curve Attack in node-jose5.9 Medium
- remarkable project remarkable, hackerone remarkable node module +1 moreXSS in Data URI in remarkable6.1 Medium
- joyent http-signature, hackerone http-signature node module +1 moreHeader Forgery in http-signature7.5 High
- hackerone html-janitor node module, html-janitor project html-janitor +1 moreCross-Site Scripting in html-janitor6.1 Medium
- augustine project augustine, hackerone augustine node module +1 moreDirectory Traversal in augustine6.5 Medium
- hackerone html-janitor node module, theguardian html-janitor +1 moreBypassing Sanitization using DOM clobbering in html-janitor6.1 Medium
- cryptic-apps hopper disassembler, talos hopper +1 moreAn exploitable out of bounds write vulnerability exists in the parsing of ELF Section Headers of...7.5 High
- react-native-baidu-voice-synthesizer project react-native-baidu-voice-synthesizer, hackerone react-native-baidu-voice-synthesizer node module +1 moreDownloads Resources over HTTP in react-native-baidu-voice-synthesizer8.1 High
- windows-latestchromedriver project windows-latestchromedriver, hackerone windows-latestchromedriver node module +1 moreDownloads Resources over HTTP in windows-latestchromedriver8.1 High
- mapbox npm-test-sqlite3-trunk, hackerone npm-test-sqlite3-trunk node module +1 moreDownloads Resources over HTTP in npm-test-sqlite3-trunk8.1 High
- hclsoftware bigfix platformIBM BigFix Platform 9.2 and 9.5 transmits sensitive or security-critical data in clear text in a...8.6 High
- recent threads project threadsThe Recent Threads plugin before 1.1 for MyBB allows XSS via a thread subject.5.4 Medium
- hclsoftware connectionsIBM Connections 5.0, 5.5, and 6.0 could allow a remote attacker to conduct phishing attacks,...6.8 Medium
- alto-saxophone project alto-saxophone, hackerone alto-saxophone node module +1 moreDownloads Resources over HTTP in alto-saxophone8.1 High
- pm2-kafka project pm2-kafka, hackerone pm2-kafka node module +1 moreDownloads Resources over HTTP in pm2-kafka8.1 High
- haxeshim project haxeshimDownloads Resources over HTTP in haxeshim8.1 High
- windows-seleniumjar project windows-seleniumjar, hackerone windows-seleniumjar node module +1 morewindows-seleniumjar downloads Resources over HTTP8.1 High
- openframe-ascii-image project openframe-ascii-image, hackerone openframe-ascii-image node module +1 moreopenframe-ascii-image downloads Resources over HTTP8.1 High
- windows-iedriver project windows-iedriver, hackerone windows-iedriver node module +1 moreDownloads Resources over HTTP in windows-iedriver8.1 High
- haxe, hackerone haxe3 node module +1 moreDownloads Resources over HTTP in haxe38.1 High
- windows-selenium-chromedriver project windows-selenium-chromedriver, hackerone windows-selenium-chromedriver node module +1 morewindows-selenium-chromedriver downloads Resources over HTTP8.1 High
- fis-sass-all project fis-sass-all, hackerone fis-sass-all node module +1 morefis-sass-all downloads Resources over HTTP8.1 High
- pk-app-wonderbox project pk-app-wonderbox, hackerone pk-app-wonderbox node module +1 moreDownloads Resources over HTTP in pk-app-wonderbox8.1 High
- Show moreLoading…