npm
4,315 tracked vulnerabilities.
CVE-2017-16051
HIGH
sqliter - Exposure of Sensitive Information via Malicious Environment Variable Hijacking
Jun 04, 2018
CVSS 7.5
EPSS 0.01
CVE-2017-16050
HIGH
sqlite.js - Exposure of Sensitive Information via Malicious Environment Variable Hijacking
Jun 04, 2018
CVSS 7.5
EPSS 0.01
CVE-2017-16049
HIGH
nodesqlite - Exposure of Sensitive Information via Malicious Environment Variable Hijacking
Jun 04, 2018
CVSS 7.5
EPSS 0.01
CVE-2017-16048
HIGH
node-sqlite - Exposure of Sensitive Information via Malicious Environment Variable Hijacking
Jun 04, 2018
CVSS 7.5
EPSS 0.01
CVE-2017-16046
HIGH
npm mariadb - Embedded Malicious Code
Jun 04, 2018
CVSS 7.5
EPSS 0.01
CVE-2017-16045
HIGH
jquery.js - Exposure of Sensitive Information via Malicious Environment Variable Hijacking
Jun 04, 2018
CVSS 7.5
EPSS 0.01
CVE-2017-16044
HIGH
D3.js - Information Disclosure
Jun 04, 2018
CVSS 7.5
EPSS 0.01
CVE-2017-16043
MEDIUM
shout 0.44.0-0.49.3 - Cross-Site Scripting via /topic Command
Jun 04, 2018
CVSS 6.1
EPSS 0.01
CVE-2017-16042
CRITICAL
Growl < 1.10.2 - OS Command Injection via Improper Input Sanitization
Jun 04, 2018
CVSS 9.8
EPSS 0.04
CVE-2017-16041
MEDIUM
ikst < 1.1.2 - Cleartext Transmission of Sensitive Information via HTTP Resource Download
Jun 04, 2018
CVSS 5.9
EPSS 0.01
CVE-2017-16040
HIGH
gfe-sass < 1.0.19 - Cleartext Transmission of Sensitive Information
Jun 04, 2018
CVSS 8.1
EPSS 0.02
CVE-2017-16039
HIGH
hftp - Path Traversal via URL Parameter
Jun 04, 2018
CVSS 7.5
EPSS 0.02
CVE-2017-16038
HIGH
f2e-server < 1.12.11 - Path Traversal via URL Manipulation
Jun 04, 2018
CVSS 7.5
EPSS 0.03
CVE-2017-16037
HIGH
gomeplus-h5-proxy - Path Traversal via URL Parameter
Jun 04, 2018
CVSS 7.5
EPSS 0.02
CVE-2017-16036
HIGH
badjs-sourcemap-server - Path Traversal via URL Manipulation
Jun 04, 2018
CVSS 7.5
EPSS 0.02
CVE-2017-16035
HIGH
hubl-server < 1.1.5 - Cleartext Transmission of Sensitive Information via HTTP Redirect
Jun 04, 2018
CVSS 8.1
EPSS 0.01
CVE-2017-16031
HIGH
socket.io < 0.9.6 - Predictable Socket ID via Math.random()
Jun 04, 2018
CVSS 7.5
EPSS 0.02
CVE-2017-16030
HIGH
useragent < 2.1.12 - Uncontrolled Resource Consumption via Long Useragent Header
Jun 04, 2018
CVSS 7.5
EPSS 0.01
CVE-2017-16029
HIGH
hostr < 2.3.5 - Path Traversal via URL Path
Jun 04, 2018
CVSS 7.5
EPSS 0.02
CVE-2017-16028
MEDIUM
react-native-meteor-oauth - Info Disclosure
Jun 04, 2018
CVSS 5.3
EPSS 0.01
CVE-2017-16026
MEDIUM
Request 2.2.6-2.47.0, 2.51.0-2.67.0 - Memory Corruption
Jun 04, 2018
CVSS 5.9
EPSS 0.03
CVE-2017-16025
MEDIUM
hapijs nes < 6.4.0 - Denial of Service via Invalid Cookie Header
Jun 04, 2018
CVSS 5.9
EPSS 0.02
CVE-2017-16024
MEDIUM
sync-exec < 0.6.2 - Insecure Temporary File
Jun 04, 2018
CVSS 6.5
EPSS 0.03
CVE-2017-16023
HIGH
decamelize 1.1.0-1.1.1 - Denial of Service via Unescaped Separator Values
Jun 04, 2018
CVSS 7.5
EPSS 0.01
CVE-2017-16022
MEDIUM
morris.js < 0.5.0 - Stored Cross-Site Scripting in SVG Graph Hover Labels
Jun 04, 2018
CVSS 6.1
EPSS 0.01
Products
openclaw 433
n8n 110
parse-server 98
flowise 67
directus 55
nocodb 54
electron 49
next 47
vm2 41
hono 38
axios 33
undici 30
pnpm 25
ghost 22
vite 21
astro 19
tar 19
tinymce 18
protobufjs 16
ckeditor4 15
fuxa-server 15
jspdf 15
joplin 14
liquidjs 14
nodebb 14
sequelize 14
angular 13
flowise-components 13
react-router 13
signalk-server 13
Quick Filters