TN
Vendor
The Node.js Project
14
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2018-12123 | NO Node.js The Node.js Project | 4.3 | Nov 28 | Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Hostname spoofing in URL parser for javascript protocol: If a Node.js application is using url.parse()… |
| CVE-2018-12122 | NO Node.js The Node.js Project | 7.5 | Nov 28 | Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Slowloris HTTP Denial of Service: An attacker can cause a Denial of Service (DoS) by sending headers… |
| CVE-2018-12121 | NO Node.js The Node.js Project | 7.5 | Nov 28 | Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Denial of Service with large HTTP headers: By using a combination of many requests with maximum sized… |
| CVE-2018-12120 | NO Node.js The Node.js Project | 8.1 | Nov 28 | Node.js: All versions prior to Node.js 6.15.0: Debugger port 5858 listens on any interface by default: When the debugger is enabled with `node --debug` or `node debug`, it listens… |
| CVE-2018-12116 | NO Node.js The Node.js Project | 7.5 | Nov 28 | Node.js: All versions prior to Node.js 6.15.0 and 8.14.0: HTTP request splitting: If Node.js can be convinced to use unsanitized user-provided Unicode data for the `path` option… |
| CVE-2018-7166 | NO Node.js The Node.js Project | 7.5 | Aug 21 | In all versions of Node.js 10 prior to 10.9.0, an argument processing flaw can cause `Buffer.alloc()` to return uninitialized memory |
| CVE-2018-12115 | NO Node.js The Node.js Project | 7.5 | Aug 21 | In all versions of Node.js prior to 6.14.4, 8.11.4 and 10.9.0 when used with UCS-2 encoding (recognized by Node.js under the names `'ucs2'`, `'ucs-2'`, `'utf16le'` and… |
| CVE-2018-7162 | NO Node.js The Node.js Project | 7.5 | Jun 13 | All versions of Node.js 9.x and 10.x are vulnerable and the severity is HIGH |
| CVE-2018-7167 | NO Node.js The Node.js Project | 7.5 | Jun 13 | Calling Buffer.fill() or Buffer.alloc() with some parameters can lead to a hang which could result in a Denial of Service |
| CVE-2018-7164 | NO Node.js The Node.js Project | 7.5 | Jun 13 | Node.js versions 9.7.0 and later and 10.x are vulnerable and the severity is MEDIUM |
| CVE-2018-7161 | NO Node.js The Node.js Project | 7.5 | Jun 13 | All versions of Node.js 8.x, 9.x, and 10.x are vulnerable and the severity is HIGH |
| CVE-2018-7159 | NO Node.js The Node.js Project | 5.3 | May 17 | The HTTP parser in all current versions of Node.js ignores spaces in the `Content-Length` header, allowing input such as `Content-Length: 1 2` to be interpreted as having a value… |
| CVE-2018-7160 | NO Node.js The Node.js Project | 8.8 | May 17 | The Node.js inspector, in 6.x and later is vulnerable to a DNS rebinding attack which could be exploited to perform remote code execution |
| CVE-2018-7158 | NO Node.js The Node.js Project | 7.5 | May 17 | The `'path'` module in the Node.js 4.x release line contains a potential regular expression denial of service (ReDoS) vector |