npm
4,315 tracked vulnerabilities.
CVE-2016-10565
HIGH
operadriver < 0.2.3 - Remote Code Execution via HTTP Binary Download
May 31, 2018
CVSS 8.1
EPSS 0.01
CVE-2016-10564
HIGH
apk-parser < 0.1.6 - Remote Code Execution via HTTP Resource Download
May 31, 2018
CVSS 8.1
EPSS 0.01
CVE-2016-10563
HIGH
go-ipfs-dep < 0.4.4 - Man-in-the-Middle Attack via Insecure HTTP Download
May 31, 2018
CVSS 8.1
EPSS 0.01
CVE-2016-10562
HIGH
iedriver < 3.0.0 - Remote Code Execution via HTTP Binary Download
May 31, 2018
CVSS 8.1
EPSS 0.02
CVE-2016-10561
MEDIUM
Bitty 0.2.10 - Path Traversal via URL Path in GET Requests
May 31, 2018
CVSS 5.3
EPSS 0.01
CVE-2016-10560
HIGH
galenframework-cli < 2.3.1 - Remote Code Execution via HTTP Binary Download
May 31, 2018
CVSS 8.1
EPSS 0.02
CVE-2016-10557
HIGH
appium-chromedriver < 2.9.4 - Remote Code Execution via HTTP Binary Download
May 31, 2018
CVSS 8.1
EPSS 0.01
CVE-2016-10555
MEDIUM
jwt-simple < 0.3.0 - Unauthenticated Algorithm Substitution via jwt.decode()
May 31, 2018
CVSS 6.5
EPSS 0.05
CVE-2016-10554
CRITICAL
sequelize < 1.7.0-alpha3 - SQL Injection via SQLite MySQL Backslash Escaping
May 31, 2018
CVSS 9.8
EPSS 0.02
CVE-2016-10553
CRITICAL
sequelize < 2.1.3 - SQL Injection
May 31, 2018
CVSS 9.8
EPSS 0.01
CVE-2016-10552
HIGH
igniteui < 0.0.5 - Insecure Resource Download via HTTP
May 31, 2018
CVSS 7.4
EPSS 0.01
CVE-2016-10550
CRITICAL
sequelize < 3.16.0 - SQL Injection via Limit or Order Parameters
May 31, 2018
CVSS 9.8
EPSS 0.02
CVE-2016-10549
MEDIUM
Sails < 0.12.7 - Improper Access Control via CORS Misconfiguration
May 31, 2018
CVSS 4.4
EPSS 0.01
CVE-2016-10548
MEDIUM
reduce-css-calc <=1.2.4 - Arbitrary Code Execution via Crafted CSS Input
May 31, 2018
CVSS 6.1
EPSS 0.01
CVE-2016-10547
MEDIUM
Nunjucks < 2.4.2 - Cross-Site Scripting via Array Key Bypass
May 31, 2018
CVSS 6.1
EPSS 0.01
CVE-2016-10546
CRITICAL
PouchDB < 6.0.4 - Remote Code Execution via Map/Reduce Functions
May 31, 2018
CVSS 9.8
EPSS 0.03
CVE-2016-10544
MEDIUM
uws 0.10.0-0.10.8 - Denial of Service via WebSocket Message Decompression
May 31, 2018
CVSS 5.9
EPSS 0.01
CVE-2016-10543
MEDIUM
call 2.0.1-3.0.1 - Improper Input Validation via Empty Parameter Bypass
May 31, 2018
CVSS 5.3
EPSS 0.01
CVE-2016-10542
HIGH
WS < 1.1.0 - Denial of Service
May 31, 2018
CVSS 7.5
EPSS 0.08
CVE-2016-10541
CRITICAL
shell-quote < 1.6.1 - OS Command Injection via Redirection Operator Escape Bypass
May 31, 2018
CVSS 9.8
EPSS 0.02
CVE-2016-10540
HIGH
minimatch < 3.0.1 - Regular Expression Denial of Service via Pattern Parameter
May 31, 2018
CVSS 7.5
EPSS 0.02
CVE-2016-10539
HIGH
negotiator < 0.6.0 - Regular Expression Denial of Service via Accept-Language Header
May 31, 2018
CVSS 7.5
EPSS 0.01
CVE-2016-10538
LOW
node-cli < 1.0.0 - Path Traversal via Insecure Lock and Log File Handling
May 31, 2018
CVSS 3.5
EPSS 0.01
CVE-2016-10537
MEDIUM
backbone < 0.3.3 - Cross-Site Scripting via Model#Escape Function
May 31, 2018
CVSS 5.4
EPSS 0.01
CVE-2016-10536
MEDIUM
engine.io-client < 1.6.8 - Improper Certificate Validation via rejectUnauthorized Setting
May 31, 2018
CVSS 5.9
EPSS 0.01
Products
openclaw 433
n8n 110
parse-server 98
flowise 67
directus 55
nocodb 54
electron 49
next 47
vm2 41
hono 38
axios 33
undici 30
pnpm 25
ghost 22
vite 21
astro 19
tar 19
tinymce 18
protobufjs 16
ckeditor4 15
fuxa-server 15
jspdf 15
joplin 14
liquidjs 14
nodebb 14
sequelize 14
angular 13
flowise-components 13
react-router 13
signalk-server 13
Quick Filters