Skip to contentHackerone vulnerabilities
Newest
- nodemailer-js project nodemailer-js, hackerone nodemailer-js node module +1 morenodemailer-js is malwareCVE-2017-160717.5 High
- nodecaffe project nodecaffe, hackerone nodecaffe node module +1 morenodecaffe is malwareCVE-2017-160707.5 High
- nodeffmpeg project nodeffmpeg, hackerone nodeffmpeg node module +1 morenodeffmpeg is malwareCVE-2017-160697.5 High
- ffmepg project ffmepg, hackerone ffmepg node module +1 moreffmepg is malwareCVE-2017-160687.5 High
- node-opencv project node-opencv, hackerone node-opencv node module +1 morenode-opencv is malwareCVE-2017-160677.5 High
- opencv.js project opencv.js, hackerone opencv.js node module +1 moreopencv.js is malwareCVE-2017-160667.5 High
- openssl.js project openssl.js, hackerone openssl.js node module +1 moreopenssl.js is malwareCVE-2017-160657.5 High
- node-openssl project node-openssl, hackerone node-openssl node module +1 morenode-openssl is malwareCVE-2017-160647.5 High
- node-opensl project node-opensl, hackerone node-opensl node module +1 morenode-opensl is malwareCVE-2017-160637.5 High
- babelcli project babelcli, hackerone babelcli node module +1 morebabelcli is malwareCVE-2017-160607.5 High
- mssql-node project mssql-node, hackerone mssql-node node module +1 moremssql-node is malwareCVE-2017-160597.5 High
- gruntcli project gruntcli, hackerone gruntcli node module +1 moregruntcli is malwareCVE-2017-160587.5 High
- nodemssql project nodemssql, hackerone nodemssql node module +1 morenodemssql is malwareCVE-2017-160577.5 High
- mssql.js project mssql.js, hackerone mssql.js node module +1 moremssql.js is malwareCVE-2017-160567.5 High
- sqlserver project sqlserver, hackerone sqlserver node module +1 moresqlserver is malwareCVE-2017-160557.5 High
- nodefabric project nodefabric, hackerone nodefabric node module +1 morenodefabric is malwareCVE-2017-160547.5 High
- fabric-js project fabric-js, hackerone fabric-js node module +1 morefabric-js is malwareCVE-2017-160537.5 High
- node-fabric project node-fabric, hackerone node-fabric node module +1 morenode-fabric is malwareCVE-2017-160527.5 High
- sqliter project sqliter, hackerone sqliter node module +1 moresqliter is malwareCVE-2017-160517.5 High
- sqlite.js project sqlite.js, hackerone sqlite.js node module +1 moresqlite.js is malwareCVE-2017-160507.5 High
- nodesqlite project nodesqlite, hackerone nodesqlite node module +1 morenodesqlite is malwareCVE-2017-160497.5 High
- node-sqlite project node-sqlite, hackerone node-sqlite node module +1 morenode-sqlite is malwareCVE-2017-160487.5 High
- mariadb, hackerone mariadb node module +1 moreWithdrawn Advisory: mariadb was malwareCVE-2017-160467.5 High
- jquery.js project jquery.js, hackerone jquery.js node module +1 morejquery.js is malwareCVE-2017-160457.5 High
- d3.js project d3.js, hackerone d3.js node module +1 mored3.js is malwareCVE-2017-160447.5 High
- shout project shout, hackerone shout node module +1 moreHTML Injection in shoutCVE-2017-16043Fix available6.1 Medium
- growl project growl, hackerone growl node module +1 moreGrowl before 1.10.0 vulnerable to Command InjectionCVE-2017-16042Fix available9.8 Critical
- ikst project ikst, hackerone ikst node module +1 moreikst Downloads Resources over HTTPCVE-2017-16041Fix available5.9 Medium
- gfe-sass project gfe-sass, hackerone gfe-sass node module +1 moregfe-sass downloads Resources over HTTPCVE-2017-160408.1 High
- hftp project hftp, hackerone hftp node module +1 moreDirectory Traversal in hftpCVE-2017-160397.5 High
- f2e-server project f2e-server, hackerone f2e-server node module +1 moreDirectory Traversal in f2e-serverCVE-2017-16038Fix available7.5 High
- gomeplus-h5-proxy project gomeplus-h5-proxy, hackerone gomeplus-h5-proxy node module +1 moreDirectory Traversal in gomeplus-h5-proxyCVE-2017-160377.5 High
- badjs-sourcemap-server project badjs-sourcemap-server, hackerone badjs-sourcemap-server node module +1 moreDirectory Traversal in badjs-sourcemap-serverCVE-2017-160367.5 High
- hubspot hubl-server, hackerone hubl-server node module +1 morehubl-server downloads resources over HTTPCVE-2017-160358.1 High
- socket socket.io, hackerone socket.io node module +1 moreInsecure randomness in socket.ioCVE-2017-16031Fix available7.5 High
- useragent project useragent, hackerone useragent node module +1 moreReDoS via long UserAgent header in useragentCVE-2017-16030Fix available7.5 High
- hostr project hostr, hackerone hostr node module +1 moreDirectory Traversal in hostrCVE-2017-16029Fix available7.5 High
- randomatic project randomatic, hackerone react-native-meteor-oauth node module +1 moreCryptographically Weak PRNG in randomaticCVE-2017-16028Fix available5.3 Medium
- request project request, hackerone request node module +1 moreRemote Memory Exposure in requestCVE-2017-16026Fix available5.9 Medium
- hapijs nes, hackerone nes node module +1 moreDenial of Service in nesCVE-2017-16025Fix available5.9 Medium
- sync-exec project sync-exec, hackerone sync-exec node module, nodejs node.js +2 moreTmp files readable by other users in sync-execCVE-2017-160246.5 Medium
- decamelize project decamelize, hackerone decamelize node module +1 moreRegular Expression Denial of Service in decamelizeCVE-2017-16023Fix available7.5 High
- morris.js project morris.js, hackerone morris.js node module +1 moreCross-Site Scripting in morris.jsCVE-2017-160226.1 Medium
- garycourt uri-js, hackerone uri-js node module +1 moreRegular Expression Denial Of Service in uri-jsCVE-2017-16021Fix available6.5 Medium
- summit project summit, hackerone summit node module +1 moreUnsafe eval() in summit allows arbitrary code executionCVE-2017-160209.8 Critical
- gitbook, hackerone gitbook node module +1 moreCross-Site Scripting in gitbookCVE-2017-16019Fix available6.1 Medium
- restify, hackerone restify node module +1 moreCross-Site Scripting (XSS) in restifyCVE-2017-16018Fix available6.1 Medium
- punkave sanitize-html, hackerone sanitize-html node module +1 moreCross-Site Scripting in sanitize-htmlCVE-2017-16017Fix available6.1 Medium
- punkave sanitize-html, hackerone sanitize-html node module +1 moreCross-Site Scripting in sanitize-htmlCVE-2017-16016Fix available6.1 Medium
- forms project forms, hackerone forms node module +1 moreCross-Site Scripting in formsCVE-2017-16015Fix available6.1 Medium
- Show moreLoading…