CVEs published in June 2018
1,550 vulnerabilities, 195 critical, 3 exploited.
- dns-sync project dns-sync, hackerone dns-sync node module +1 moreCommand Injection in dns-sync9.8 Critical
- no-case project no-case, hackerone no-case node module +1 moreRegular Expression Denial of Service in no-case7.5 High
- charset project charset, hackerone charset node module +1 moreRegular Expression Denial of Service in charset7.5 High
- tiny-http project tiny-http, hackerone tiny-http node module +1 moreDirectory Traversal in tiny-http7.5 High
- serveryaozeyan project serveryaozeyan, hackerone serveryaozeyan node module +1 moreDirectory Traversal in serveryaozeyan7.5 High
- serverliujiayi1 project serverliujiayi1, hackerone serverliujiayi1 node module +1 moreDirectory Traversal in serverliujiayi17.5 High
- iter-http project iter-http, hackerone iter-http node module +1 moreDirectory Traversal in iter-http7.5 High
- cyber-js project cyber-js, hackerone cyber-js node module +1 moreDirectory Traversal in cyber-js7.5 High
- sencisho project sencisho, hackerone sencisho node module +1 moreDirectory Traversal in sencisho7.5 High
- xtalk project xtalk, hackerone xtalk node module +1 moreDirectory Traversal in xtalk7.5 High
- fsk-server project fsk-server, hackerone fsk-server node module +1 moreDirectory Traversal in fsk-server7.5 High
- serverlyr project serverlyr, hackerone serverlyr node module +1 moreDirectory Traversal in serverlyr7.5 High
- safe-eval project safe-eval, hackerone safe-eval node module +1 moreSandbox Breakout in safe-eval10.0 Critical
- ua-parser project ua-parser, hackerone ua-parser node module +1 moreReDoS via long UserAgent header in ua-parser7.5 High
- tinyserver2 project tinyserver2, hackerone tinyserver2 node module +1 moreDirectory Traversal in tinyserver27.5 High
- list-n-stream project list-n-stream, hackerone list-n-stream node module +1 moreDirectory Traversal in list-n-stream7.5 High
- node-simple-router, hackerone node-simple-router node module +1 moreDirectory Traversal in node-simple-router7.5 High
- node-postgres pg, hackerone pg node module +1 moreRemote Code Execution in pg9.8 Critical
- cross-env.js project cross-env.js, hackerone cross-env.js node module +1 morecross-env.js is malware7.5 High
- nodesass project nodesass, hackerone nodesass node module +1 moreNodesass is malware7.5 High
- smb project smb, hackerone smb node module +1 moresmb is malware7.5 High
- shadowsock project shadowsock, hackerone shadowsock node module +1 moreShadowsock is malware7.5 High
- mongose project mongose, hackerone mongose node module +1 moremongose is malware7.5 High
- proxy.js project proxy.js, hackerone proxy.js node module +1 moreHijacked Environment Variables in proxy.js7.5 High
- http-proxy.js project http-proxy.js, hackerone http-proxy.js node module +1 morehttp-proxy.js is malware7.5 High
- crossenv project crossenv, hackerone crossenv node module +1 morecrossenv is malware7.5 High
- noderequest project noderequest, hackerone noderequest node module +1 morenoderequest is malware7.5 High
- nodemailer.js project nodemailer.js, hackerone nodemailer.js node module +1 morenodemailer.js is malware7.5 High
- nodemailer-js project nodemailer-js, hackerone nodemailer-js node module +1 morenodemailer-js is malware7.5 High
- nodecaffe project nodecaffe, hackerone nodecaffe node module +1 morenodecaffe is malware7.5 High
- nodeffmpeg project nodeffmpeg, hackerone nodeffmpeg node module +1 morenodeffmpeg is malware7.5 High
- ffmepg project ffmepg, hackerone ffmepg node module +1 moreffmepg is malware7.5 High
- node-opencv project node-opencv, hackerone node-opencv node module +1 morenode-opencv is malware7.5 High
- opencv.js project opencv.js, hackerone opencv.js node module +1 moreopencv.js is malware7.5 High
- openssl.js project openssl.js, hackerone openssl.js node module +1 moreopenssl.js is malware7.5 High
- node-openssl project node-openssl, hackerone node-openssl node module +1 morenode-openssl is malware7.5 High
- node-opensl project node-opensl, hackerone node-opensl node module +1 morenode-opensl is malware7.5 High
- babelcli project babelcli, hackerone babelcli node module +1 morebabelcli is malware7.5 High
- mssql-node project mssql-node, hackerone mssql-node node module +1 moremssql-node is malware7.5 High
- gruntcli project gruntcli, hackerone gruntcli node module +1 moregruntcli is malware7.5 High
- nodemssql project nodemssql, hackerone nodemssql node module +1 morenodemssql is malware7.5 High
- mssql.js project mssql.js, hackerone mssql.js node module +1 moremssql.js is malware7.5 High
- perl, apple mac os x, archive\ \ +6 more +8 moreIn Perl through 5.26.2, the Archive::Tar module allows remote attackers to bypass a directory...7.5 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreIn the function csr_update_fils_params_rso(), insufficient validation on a key length can result...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreA Use After Free condition can occur in the IPA driver whenever the IPA IOCTLs...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreA race condition in drm_atomic_nonblocking_commit() in the display driver can potentially lead to...7.0 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moredcc_curr_list is initialized with a default invalid value that is expected to be programmed by...7.8 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreBuffer Copy without Checking Size of Input can occur during the DRM SDE driver initialization...7.8 High
- onssi ocularisAn exploitable denial of service vulnerability exists in the Ocularis Recorder functionality of...7.5 High
- google android, qualcomm, inc. android for msm, firefox os for msm, qrd android +1 moreStack-based buffer overflow can occur In the WLAN driver if the pmkid_count value is larger than...7.8 High
- Show moreLoading…