npm
4,297 tracked vulnerabilities.
CVE-2017-16058
HIGH
gruntcli - Exposure of Sensitive Information via Environment Variable Hijacking
Jun 07, 2018
CVSS 7.5
EPSS 0.01
CVE-2017-16057
HIGH
nodemssql - Exposure of Sensitive Information via Malicious Environment Variable Hijacking
Jun 07, 2018
CVSS 7.5
EPSS 0.01
CVE-2017-16056
HIGH
mssql.js - Exposure of Sensitive Information via Malicious Environment Variable Hijacking
Jun 07, 2018
CVSS 7.5
EPSS 0.01
CVE-2017-16055
HIGH
sqlserver - Exposure of Sensitive Information via Malicious Environment Variable Hijacking
Jun 04, 2018
CVSS 7.5
EPSS 0.01
CVE-2017-16054
HIGH
nodefabric - Exposure of Sensitive Information via Environment Variable Hijacking
Jun 04, 2018
CVSS 7.5
EPSS 0.01
CVE-2017-16053
HIGH
fabric-js - Exposure of Sensitive Information via Malicious Environment Variable Hijacking
Jun 04, 2018
CVSS 7.5
EPSS 0.01
CVE-2017-16052
HIGH
node-fabric - Exposure of Sensitive Information via Environment Variable Hijacking
Jun 04, 2018
CVSS 7.5
EPSS 0.01
CVE-2017-16051
HIGH
sqliter - Exposure of Sensitive Information via Malicious Environment Variable Hijacking
Jun 04, 2018
CVSS 7.5
EPSS 0.01
CVE-2017-16050
HIGH
sqlite.js - Exposure of Sensitive Information via Malicious Environment Variable Hijacking
Jun 04, 2018
CVSS 7.5
EPSS 0.01
CVE-2017-16049
HIGH
nodesqlite - Exposure of Sensitive Information via Malicious Environment Variable Hijacking
Jun 04, 2018
CVSS 7.5
EPSS 0.01
CVE-2017-16048
HIGH
node-sqlite - Exposure of Sensitive Information via Malicious Environment Variable Hijacking
Jun 04, 2018
CVSS 7.5
EPSS 0.01
CVE-2017-16046
HIGH
npm mariadb - Embedded Malicious Code
Jun 04, 2018
CVSS 7.5
EPSS 0.01
CVE-2017-16045
HIGH
jquery.js - Exposure of Sensitive Information via Malicious Environment Variable Hijacking
Jun 04, 2018
CVSS 7.5
EPSS 0.01
CVE-2017-16044
HIGH
D3.js - Information Disclosure
Jun 04, 2018
CVSS 7.5
EPSS 0.01
CVE-2017-16043
MEDIUM
shout 0.44.0-0.49.3 - Cross-Site Scripting via /topic Command
Jun 04, 2018
CVSS 6.1
EPSS 0.01
CVE-2017-16042
CRITICAL
Growl < 1.10.2 - OS Command Injection via Improper Input Sanitization
Jun 04, 2018
CVSS 9.8
EPSS 0.04
CVE-2017-16041
MEDIUM
ikst < 1.1.2 - Cleartext Transmission of Sensitive Information via HTTP Resource Download
Jun 04, 2018
CVSS 5.9
EPSS 0.01
CVE-2017-16040
HIGH
gfe-sass < 1.0.19 - Cleartext Transmission of Sensitive Information
Jun 04, 2018
CVSS 8.1
EPSS 0.02
CVE-2017-16039
HIGH
hftp - Path Traversal via URL Parameter
Jun 04, 2018
CVSS 7.5
EPSS 0.02
CVE-2017-16038
HIGH
f2e-server < 1.12.11 - Path Traversal via URL Manipulation
Jun 04, 2018
CVSS 7.5
EPSS 0.03
CVE-2017-16037
HIGH
gomeplus-h5-proxy - Path Traversal via URL Parameter
Jun 04, 2018
CVSS 7.5
EPSS 0.02
CVE-2017-16036
HIGH
badjs-sourcemap-server - Path Traversal via URL Manipulation
Jun 04, 2018
CVSS 7.5
EPSS 0.02
CVE-2017-16035
HIGH
hubl-server < 1.1.5 - Cleartext Transmission of Sensitive Information via HTTP Redirect
Jun 04, 2018
CVSS 8.1
EPSS 0.01
CVE-2017-16031
HIGH
socket.io < 0.9.6 - Predictable Socket ID via Math.random()
Jun 04, 2018
CVSS 7.5
EPSS 0.02
CVE-2017-16030
HIGH
useragent < 2.1.12 - Uncontrolled Resource Consumption via Long Useragent Header
Jun 04, 2018
CVSS 7.5
EPSS 0.01
Products
openclaw 433
parse-server 98
n8n 92
flowise 67
directus 55
nocodb 54
electron 49
next 47
vm2 41
hono 38
axios 33
undici 30
pnpm 25
ghost 22
vite 21
astro 19
tar 19
tinymce 18
protobufjs 16
ckeditor4 15
fuxa-server 15
jspdf 15
joplin 14
liquidjs 14
nodebb 14
sequelize 14
angular 13
flowise-components 13
react-router 13
signalk-server 13
Quick Filters