Skip to contentHackerone vulnerabilities
Newest
- install-nw project install-nw, hackerone install-nw node module +1 moreinstall-nw downloads Resources over HTTPCVE-2016-10566Fix available8.1 High
- groupon selenium-download, hackerone selenium-download node module +1 moreDownloads Resources over HTTP in selenium-downloadCVE-2016-10559Fix available8.1 High
- aerospike, hackerone aerospike node module +1 moreDownloads Resources over HTTP in aerospikeCVE-2016-10558Fix available8.1 High
- sequelizejs sequelize, hackerone sequelize node module +1 moreSQL Injection in sequelizeCVE-2016-10556Fix available7.5 High
- balderdash waterline-sequel, hackerone waterline-sequel node module +1 moreSQL Injection in waterline-sequelCVE-2016-10551Fix available9.8 Critical
- dwyl hapi-auth-jwt2, hackerone hapi-auth-jwt2 node module +1 moreAuthentication Bypass in hapi-auth-jwt2CVE-2016-10525Fix available9.8 Critical
- hackerone mysql node module, mysqljs mysql +1 moreSQL Injection in mysqlCVE-2015-9244Fix available9.8 Critical
- hackerone hapi node module, hapijs hapi +1 moreUnsafe Merging of CORS Configuration Conflict in hapiCVE-2015-9243Fix available5.9 Medium
- ecstatic project ecstatic, hackerone ecstatic node module +1 moreDenial of Service in ecstaticCVE-2015-9242Fix available7.5 High
- hackerone hapi node module, hapijs hapi +1 moreDenial of Service in hapiCVE-2015-9241Fix available7.5 High
- hackerone keystone node module, keystonejs keystone +1 moreAuthentication Weakness in keystoneCVE-2015-9240Fix available7.5 High
- auth0 jsonwebtoken, hackerone jsonwebtoken node module +1 moreVerification Bypass in jsonwebtokenCVE-2015-9235Public exploitFix available9.8 Critical
- hackerone inert node module, hapi inert +1 moreHidden Directories Always Served in inertCVE-2014-10068Fix available7.5 High
- paypal-ipn project paypal-ipn, hackerone paypal-ipn node module +1 moreValidation Bypass in paypal-ipnCVE-2014-10067Fix available5.9 Medium
- hackerone nextcloud server, nextcloud server +1 moreNextcloud Server before 11.0.7 and 12.0.5 suffers from an Authorization Bypass Through User...CVE-2017-09365.7 Medium
- hackerone private address check ruby gem, private address check project address check +1 moreprivate_address_check contains Incomplete List of Disallowed InputsCVE-2017-0909Fix available9.8 Critical
- hackerone private address check ruby gem, private address check project address check +1 moreprivate_address_check vulnerable to bypass of Resolv.getaddresses methodCVE-2017-0904Fix available8.1 High
- hackerone rubygems, canonical ubuntu linux, debian linux +6 more +8 moreRubyGems vulnerable to Deserialization of Untrusted DataCVE-2017-0903Fix availableEPSS 15.9%9.8 Critical
- hackerone rubyRuby before 2.4.2, 2.3.5, and 2.2.8 is vulnerable to a malicious format string which contains a...CVE-2017-0898Fix available9.1 Critical
- hackerone rubygems, canonical ubuntu linux, debian linux +6 more +8 moreRubyGems has Origin Validation Error vulnerabilityCVE-2017-0902Fix available8.1 High
- hackerone rubygems, canonical ubuntu linux, debian linux +6 more +8 moreRubyGems may allow a maliciously crafted gem to overwrite filesCVE-2017-0901Public exploitFix availableEPSS 29.4%7.5 High
- hackerone rubygems, debian linux, redhat enterprise linux desktop +5 more +7 moreRubyGems Code Injection vulnerabilityCVE-2017-0899Fix availableEPSS 11.1%9.8 Critical
- hackerone nextcloud server, nextcloud server +1 moreNextcloud Server before 10.0.4 and 11.0.2 are vulnerable to disclosure of calendar and...CVE-2017-08953.5 Low
- hackerone nextcloud server, nextcloud server +1 moreNextcloud Server before 11.0.3 is vulnerable to disclosure of valid share tokens for public...CVE-2017-08944.3 Medium
- hackerone nextcloud server, nextcloud server +1 moreNextcloud Server before 9.0.58 and 10.0.5 and 11.0.3 are shipping a vulnerable JavaScript library...CVE-2017-08935.4 Medium
- hackerone nextcloud server, nextcloud server +1 moreNextcloud Server before 11.0.3 is vulnerable to an improper session handling allowed an...CVE-2017-08923.5 Low
- hackerone nextcloud server, nextcloud server +1 moreNextcloud Server before 9.0.58 and 10.0.5 and 11.0.3 are vulnerable to an inadequate escaping of...CVE-2017-08915.4 Medium
- hackerone nextcloud server, nextcloud server +1 moreNextcloud Server before 11.0.3 is vulnerable to an inadequate escaping leading to a XSS...CVE-2017-08905.4 Medium
- hackerone nextcloud server, nextcloud, nextcloud server +2 moreNextcloud Server before 9.0.55 and 10.0.2 suffers from a Content-Spoofing vulnerability in the ...CVE-2017-08884.3 Medium
- hackerone nextcloud server, nextcloud server +1 moreNextcloud Server before 9.0.55 and 10.0.2 suffers from a bypass in the quota limitation. Due to...CVE-2017-08874.3 Medium
- hackerone nextcloud server, nextcloud server +1 moreNextcloud Server before 9.0.55 and 10.0.2 suffers from a Denial of Service attack. Due to an...CVE-2017-08866.5 Medium
- hackerone nextcloud server, nextcloud server +1 moreNextcloud Server before 9.0.55 and 10.0.2 suffers from a error message disclosing existence of...CVE-2017-08854.3 Medium
- hackerone nextcloud server, nextcloud server +1 moreNextcloud Server before 9.0.55 and 10.0.2 suffers from a creation of folders in read-only folders...CVE-2017-08844.3 Medium
- hackerone nextcloud server, nextcloud server +1 moreNextcloud Server before 9.0.55 and 10.0.2 suffers from a permission increase on re-sharing via...CVE-2017-08836.4 Medium
- hackerone rubyType confusion exists in two methods of Ruby's WIN32OLE class, ole_invoke and ole_query_interface...CVE-2016-23369.8 Critical
- hackerone rubyAn exploitable heap overflow vulnerability exists in the Fiddle::Function.new "initialize"...CVE-2016-2339Fix available9.8 Critical
- hackerone ruby, tcl tcl/tk +1 moreType confusion exists in _cancel_eval Ruby's TclTkIp class method. Attacker passing different...CVE-2016-2337Fix available9.8 Critical
- hackerone ruby, debian linux, puppet agent +2 more +4 moreverify_certificate_identity in the OpenSSL extension in Ruby before 2.0.0 patchlevel 645, 2.1.x...CVE-2015-1855Public exploitFix available5.9 Medium