Skip to contentHackerone vulnerabilities
Newest
- hackerone m-serverm-server Vulnerable to Directory TraversalCVE-2018-16485Fix available6.5 Medium
- hackerone m-serverCross-Site Scripting in m-serverCVE-2018-16484Fix available5.4 Medium
- express-cart project express-cartAuthentication Bypass by Spoofing in express-cartCVE-2018-16483Fix available8.8 High
- hackerone mcstaticmcstatic directory traversal vulnerabilityCVE-2018-164827.5 High
- hackerone html-pagesCross-Site Scripting in html-pagesCVE-2018-164816.1 Medium
- hackerone publicTnantoka/public XSS VulnerabilityCVE-2018-16480Fix available6.1 Medium
- hackerone http-live-simulatorPath Traversal in http-live-simulatorCVE-2018-16479Fix available7.5 High
- hackerone simplehttpserverPath Traversal in simplehttpserverCVE-2018-164785.3 Medium
- brikcss mergePrototype Pollution in mergeCVE-2018-16469Fix available7.5 High
- hackerone nextcloud server, nextcloud server +1 moreA missing check in Nextcloud Server prior to 14.0.0 could give unauthorized access to the...CVE-2018-164675.3 Medium
- hackerone nextcloud server, nextcloud server +1 moreImproper revalidation of permissions in Nextcloud Server prior to 14.0.0, 13.0.6 and 12.0.11 lead...CVE-2018-164668.1 High
- hackerone nextcloud server, nextcloud server +1 moreMissing state in Nextcloud Server prior to 14.0.0 would not enforce the use of a second factor at...CVE-2018-164655.3 Medium
- hackerone nextcloud server, nextcloud server +1 moreA missing access check in Nextcloud Server prior to 14.0.0 could lead to continued access to...CVE-2018-164645.7 Medium
- hackerone nextcloud server, nextcloud server +1 moreA bug causing session fixation in Nextcloud Server prior to 14.0.0, 13.0.3 and 12.0.8 could...CVE-2018-164633.1 Low
- hackerone simplehttpserversimplehttpserver allows directory traversal and file listingCVE-2018-3787Fix available7.5 High
- hackerone nextcloud server, nextcloud server +1 moreImproper input validator in Nextcloud Server prior to 12.0.3 and 11.0.5 could lead to an attacker...CVE-2018-37765.3 Medium
- hackerone nextcloud server, nextcloud server +1 moreImproper Authentication in Nextcloud Server prior to version 12.0.3 would allow an attacker that...CVE-2018-37758.8 High
- hackerone url-parseOpen Redirect in url-parseCVE-2018-3774Fix available10.0 Critical
- activesupport project activesupport, hackerone active-support ruby gem +1 moreactive-support impersonates 'activesupport' gemCVE-2018-37799.8 Critical
- aedes project aedesImproper Authorization in aedesCVE-2018-3778Fix available5.3 Medium
- hackerone statics-serverstatics-server Cross-site Scripting vulnerabilityCVE-2018-37716.1 Medium
- hackerone markdown-pdfRemote Code Execution in markdown-pdfCVE-2018-3770Fix available5.5 Medium
- hackerone nextcloud server, nextcloud server +1 moreNextcloud Server before 12.0.8 and 13.0.3 suffers from improper checks of dropped permissions for...CVE-2018-37624.3 Medium
- hackerone nextcloud server, nextcloud server +1 moreNextcloud Server before 12.0.8 and 13.0.3 suffer from improper authentication on the OAuth2 token...CVE-2018-37618.1 High
- hackerone sprockets, debian linux, redhat cloudforms +1 more +3 moreSprockets path traversal leads to information leakCVE-2018-3760Public exploitFix availableEPSS 26.3%7.5 High
- hackerone private address check ruby gem, private address check project address check +1 moreprivate_address_check contains race conditionCVE-2018-3759Fix available3.7 Low
- express-cart project express-cartexpress-cart unrestricted file upload vulnerabilityCVE-2018-3758Fix availableEPSS 27.1%8.8 High
- https-proxy-agent project https-proxy-agent, hackerone https-proxy-agent node module +1 moreDenial of Service in https-proxy-agentCVE-2018-3739Fix available9.1 Critical
- protobufjs project protobufjs, hackerone protobufjs node module +1 moreDenial of Service in protobufjsCVE-2018-3738Fix available5.5 Medium
- joyent sshpk, hackerone sshpk node module +1 moreRegular Expression Denial of Service in sshpkCVE-2018-3737Fix available7.5 High
- bracket-template project bracket-template, hackerone bracket-template node module +1 morebracket-template vulnerable to reflected XSSCVE-2018-37356.1 Medium
- hackerone resolve-path node module, resolve-path project resolve-path +1 morePath Traversal in resolve-pathCVE-2018-3732Fix available7.5 High
- hackerone public node module, public.js project public.js +1 morePath Traversal in publicCVE-2018-3731Fix available7.5 High
- hackerone mcstatic node module, mcstatic project mcstatic +1 morePath Traversal in mcstaticCVE-2018-37307.5 High
- hackerone localhost-now node module, localhost-now project localhost-now +1 morePath Traversal in localhost-nowCVE-2018-3729Fix available7.5 High
- 626 project 626, hackerone 626 node module +1 morePath Traversal in 626CVE-2018-37277.5 High
- crud-file-server project crud-file-server, hackerone crud-file-server node module +1 moreCross-site Scripting (XSS) - Stored in crud-file-serverCVE-2018-3726Fix available6.1 Medium
- hackerone hekto node module, hekto project hekto +1 morePath Traversal in hektoCVE-2018-3725Fix available7.5 High
- general-file-server project general-file-server, hackerone general-file-server node module +1 morePath Traversal in general-file-serverCVE-2018-37247.5 High
- defaults-deep project defaults-deep, hackerone defaults-deep node module +1 morePrototype Pollution in defaults-deepCVE-2018-3723Fix available8.8 High
- hackerone merge-deep node module, merge-deep project merge-deep +1 morePrototype Pollution in merge-deepCVE-2018-3722Fix available8.8 High
- hackerone lodash node module, lodash, netapp active iq unified manager +1 more +3 morePrototype Pollution in lodashCVE-2018-3721Fix available6.5 Medium
- assign-deep project assign-deep, hackerone assign-deep node module +1 morePrototype Pollution in assign-deepCVE-2018-3720Fix available8.8 High
- hackerone mixin-deep node module, mixin-deep project mixin-deep +1 morePrototype Pollution in mixin-deepCVE-2018-3719Fix available8.8 High
- hackerone serve node module, zeit serve +1 morevercel/serve allows access to restricted files if filename is URL encoded.CVE-2018-3718Fix available5.3 Medium
- hackerone connect node module, sencha connect +1 moreCross-Site Scripting in connectCVE-2018-3717Fix available5.4 Medium
- hackerone simplehttpserver node module, simplehttpserver project simplehttpserver +1 moreStored Cross-Site Scripting in simplehttpserverCVE-2018-3716Fix available5.4 Medium
- glance project glance, hackerone glance node module +1 morePath Traversal in glanceCVE-2018-3715Fix available6.5 Medium
- hackerone node-srv node module, node-srv project node-srv +1 morePath Traversal in node-srvCVE-2018-3714Fix available6.5 Medium
- angular-http-server project angular-http-server, hackerone angular-http-server node module +1 morePath Traversal in angular-http-serverCVE-2018-3713Fix available6.5 Medium
- Show moreLoading…