npm
4,283 tracked vulnerabilities.
CVE-2020-15366
MEDIUM
ajv < 6.12.3 - Prototype Pollution via Crafted JSON Schema
Jul 15, 2020
CVSS 5.6
EPSS 0.02
CVE-2020-8203
HIGH
lodash < 4.17.20 - Prototype Pollution via _.zipObjectDeep
Jul 15, 2020
CVSS 7.4
EPSS 0.05
CVE-2020-8178
CRITICAL
jison < 0.4.18 - OS Command Injection
Jul 15, 2020
CVSS 9.8
EPSS 0.04
CVE-2020-8186
CRITICAL
devcert < 1.1.2 - Remote Code Execution via certificateFor Function
Jul 10, 2020
CVSS 9.8
EPSS 0.03
CVE-2020-7693
MEDIUM
sockjs < 0.3.20 - Denial of Service via Upgrade Header
Jul 09, 2020
CVSS 5.3
EPSS 0.05
CVE-2020-15095
MEDIUM
npm < 6.14.6 - Information Exposure via Log File
Jul 07, 2020
CVSS 4.4
EPSS 0.00
CVE-2020-4077
HIGH
Electron <7.2.4-9.0.0-beta21 - Privilege Escalation
Jul 07, 2020
CVSS 7.7
EPSS 0.01
CVE-2020-4076
HIGH
Electron <9.0.0-beta21-<8.2.4-<7.2.4 - Privilege Escalation
Jul 07, 2020
CVSS 7.8
EPSS 0.00
CVE-2020-4075
MEDIUM
Electron <7.2.4-9.0.0-beta21 - Local File Read
Jul 07, 2020
CVSS 6.8
EPSS 0.01
CVE-2020-15096
MEDIUM
Electron <6.1.1-9.0.0-beta21 - Privilege Escalation
Jul 07, 2020
CVSS 6.8
EPSS 0.01
CVE-2020-7691
MEDIUM
jspdf < 2.0.0 - Cross-Site Scripting via Script Tag Filter Bypass
Jul 06, 2020
CVSS 6.3
EPSS 0.02
CVE-2020-7690
MEDIUM
jspdf < 2.0.0 - Cross-Site Scripting via HTML Method
Jul 06, 2020
CVSS 6.1
EPSS 0.01
CVE-2020-15500
MEDIUM
NUCLEI
TileServer GL < 3.0.0 - Reflected Cross-Site Scripting via Key GET Parameter
Jul 01, 2020
CVSS 6.1
EPSS 0.12
CVE-2020-7688
HIGH
mversion < 2.0.1 - OS Command Injection via TagName Parameter
Jul 01, 2020
CVSS 8.4
EPSS 0.01
CVE-2020-13619
CRITICAL
locutus_php < 2.0.11 - OS Command Injection via escapeshellarg
Jul 01, 2020
CVSS 9.8
EPSS 0.03
CVE-2020-7689
MEDIUM
node.bcrypt.js < 5.0.0 - Integer Overflow in Data Length Handling
Jul 01, 2020
CVSS 5.9
EPSS 0.01
CVE-2020-15084
HIGH
express-jwt < 5.3.3 - Authorization Bypass via Unenforced Algorithms Configuration
Jun 30, 2020
CVSS 7.7
EPSS 0.01
CVE-2020-15362
CRITICAL
thingsSDK WiFi Scanner 1.0.1 - Code Injection
Jun 29, 2020
CVSS 9.8
EPSS 0.03
CVE-2020-4072
MEDIUM
generator-jhipster-kotlin <1.7.0 - Info Disclosure
Jun 25, 2020
CVSS 5.3
EPSS 0.01
CVE-2020-4066
LOW
limdu < 0.9.5 - OS Command Injection via trainBatch Function
Jun 22, 2020
CVSS 3.8
EPSS 0.02
CVE-2020-14968
CRITICAL
jsrsasign < 8.0.17 - Signature Validation Bypass via Prepended Null Bytes
Jun 22, 2020
CVSS 9.8
EPSS 0.03
CVE-2020-14967
CRITICAL
jsrsasign <8.0.18 - Memory Corruption
Jun 22, 2020
CVSS 9.8
EPSS 0.03
CVE-2020-14966
HIGH
jsrsasign < 8.0.18 - Cryptographic Signature Verification Bypass via ECDSA Integer Length Malleability
Jun 22, 2020
CVSS 7.5
EPSS 0.01
CVE-2020-13961
MEDIUM
Strapi < 3.0.2 - Authenticated Email Template Injection via Global Variable
Jun 19, 2020
CVSS 6.5
EPSS 0.02
CVE-2020-7679
HIGH
casperjs - Prototype Pollution via mergeObjects Utility Function
Jun 19, 2020
CVSS 7.3
EPSS 0.02
Products
openclaw 433
parse-server 98
n8n 87
flowise 67
directus 55
nocodb 54
electron 49
next 47
vm2 41
hono 35
axios 33
undici 30
pnpm 25
ghost 22
vite 21
astro 19
tar 19
tinymce 18
protobufjs 16
ckeditor4 15
fuxa-server 15
jspdf 15
joplin 14
liquidjs 14
nodebb 14
sequelize 14
angular 13
flowise-components 13
react-router 13
signalk-server 13
Quick Filters