npm
4,292 tracked vulnerabilities.
CVE-2019-13970
MEDIUM
antsword < 2.1.0 - Self Cross-Site Scripting in Database Configuration
Jul 19, 2019
CVSS 6.1
EPSS 0.02
CVE-2019-1010266
MEDIUM
lodash < 4.17.11 - Denial of Service via Date Handler Regular Expression
Jul 17, 2019
CVSS 6.5
EPSS 0.03
CVE-2019-1010091
MEDIUM
TinyMCE < 4.9.10 - Stored Cross-Site Scripting via Media Element Embed Tab
Jul 17, 2019
CVSS 6.1
EPSS 0.02
CVE-2019-5447
MEDIUM
http-file-server <= 0.2.6 - Path Traversal
Jul 15, 2019
CVSS 5.3
EPSS 0.02
CVE-2019-5444
MEDIUM
serve-here.js <v1.1.3 - Path Traversal
Jul 10, 2019
CVSS 5.3
EPSS 0.02
CVE-2019-13173
HIGH
fstream < 1.0.12 - Arbitrary File Overwrite via Hardlink Extraction
Jul 02, 2019
CVSS 7.5
EPSS 0.02
CVE-2019-13127
MEDIUM
draw.io Diagrams < 8.3.14 and mxGraph < 4.0.0 - Stored Cross-Site Scripting via Color Field Input
Jul 01, 2019
CVSS 6.1
EPSS 0.02
CVE-2019-5786
MEDIUM
KEV
Google Chrome < 72.0.3626.121 - Use-After-Free in Blink via Crafted HTML Page
Jun 27, 2019
CVSS 6.5
EPSS 0.62
CVE-2019-10157
MEDIUM
Keycloak's Node.js adapter <4.8.3 - Privilege Escalation
Jun 12, 2019
CVSS 4.7
EPSS 0.00
CVE-2019-12313
MEDIUM
Shave < 2.5.3 - Cross-Site Scripting via HTML Element Overwrite
May 24, 2019
CVSS 6.1
EPSS 0.01
CVE-2019-12043
MEDIUM
remarkable 1.7.1 - Cross-Site Scripting via Unprintable Characters in URL
May 13, 2019
CVSS 6.1
EPSS 0.01
CVE-2019-12041
HIGH
remarkable 1.7.1 - Regular Expression Denial of Service via CDATA Section
May 13, 2019
CVSS 7.5
EPSS 0.01
CVE-2019-5438
MEDIUM
harpjs/harp < 0.29.0 - Path Traversal via Symlink
May 10, 2019
CVSS 5.3
EPSS 0.01
CVE-2019-5437
MEDIUM
harpjs/harp <= 0.29.0 - Information Exposure Through Directory Listing
May 10, 2019
CVSS 5.3
EPSS 0.01
CVE-2019-10742
HIGH
axios <= 0.18.0 - Denial of Service via maxContentLength Bypass
May 07, 2019
CVSS 7.5
EPSS 0.06
CVE-2019-5432
HIGH
mqtt-packet <3.5.1-6.1.2 - Buffer Overflow
May 06, 2019
CVSS 7.5
EPSS 0.02
CVE-2019-11358
MEDIUM
jQuery < 3.4.0 - Prototype Pollution via jQuery.extend
Apr 20, 2019
CVSS 6.1
EPSS 0.87
CVE-2019-11069
HIGH
Sequelize 5.0.0-5.2.9 - SQL Injection via Improper Input Validation
Apr 10, 2019
CVSS 7.5
EPSS 0.02
CVE-2019-9844
MEDIUM
Khan Academy simple-markdown <0.4.4 - XSS
Apr 09, 2019
CVSS 6.1
EPSS 0.01
CVE-2019-11004
MEDIUM
Materialize < 1.0.0 - Cross-Site Scripting via Toast Feature
Apr 08, 2019
CVSS 6.1
EPSS 0.01
CVE-2019-11003
MEDIUM
Materialize < 1.0.0 - Cross-Site Scripting via Autocomplete Feature
Apr 08, 2019
CVSS 6.1
EPSS 0.01
CVE-2019-11002
MEDIUM
Materialize < 1.0.0 - Cross-Site Scripting via Tooltip Feature
Apr 08, 2019
CVSS 6.1
EPSS 0.01
CVE-2019-5423
HIGH
http-live-simulator <1.0.5 - Path Traversal
Apr 03, 2019
CVSS 7.5
EPSS 0.03
CVE-2019-5422
MEDIUM
buttle 0.2.0 - Stored Cross-Site Scripting via Arbitrary File Creation
Apr 03, 2019
CVSS 6.1
EPSS 0.01
CVE-2019-10260
MEDIUM
Total.js CMS 12.0.0 - Stored Cross-Site Scripting in Admin Theme Message and Column Format
Mar 28, 2019
CVSS 6.1
EPSS 0.01
Products
openclaw 433
parse-server 98
n8n 87
flowise 67
directus 55
nocodb 54
electron 49
next 47
vm2 41
hono 38
axios 33
undici 30
pnpm 25
ghost 22
vite 21
astro 19
tar 19
tinymce 18
protobufjs 16
ckeditor4 15
fuxa-server 15
jspdf 15
joplin 14
liquidjs 14
nodebb 14
sequelize 14
angular 13
flowise-components 13
react-router 13
signalk-server 13
Quick Filters