npm
4,315 tracked vulnerabilities.
CVE-2016-10535
MEDIUM
csrf-lite < 0.1.1 - Timing Attack via String Comparison
May 31, 2018
CVSS 5.9
EPSS 0.01
CVE-2016-10534
MEDIUM
electron-packager 5.2.1-6.0.0 6.0.0-6.0.2 - Improper Certificate Validation via --strict-ssl Option
May 31, 2018
CVSS 5.9
EPSS 0.01
CVE-2016-10533
HIGH
express-restify-mongoose < 2.4.2 and 3.0.0-3.0.1 - Exposure of Sensitive Information via Distinct Query Parameter
May 31, 2018
CVSS 8.8
EPSS 0.01
CVE-2016-10532
CRITICAL
console-io < 2.2.13 - Unauthenticated Remote Command Execution via WebSocket
May 31, 2018
CVSS 9.8
EPSS 0.02
CVE-2016-10531
MEDIUM
marked < 0.3.5 - Cross-Site Scripting via HTML Entity Parsing Bypass
May 31, 2018
CVSS 6.1
EPSS 0.01
CVE-2016-10530
MEDIUM
airbrake < 0.3.8 - Unauthenticated Sensitive Information Exposure via HTTP Environment Variable Transmission
May 31, 2018
CVSS 5.9
EPSS 0.01
CVE-2016-10529
HIGH
Droppy < 3.5.0 - Cross-Site Request Forgery via WebSocket Requests
May 31, 2018
CVSS 8.8
EPSS 0.00
CVE-2016-10528
MEDIUM
restafary < 1.6.1 - Path Traversal
May 31, 2018
CVSS 4.9
EPSS 0.01
CVE-2016-10527
HIGH
riot-compiler < 2.3.22 - Denial of Service via Catastrophic Backtracking
May 31, 2018
CVSS 7.5
EPSS 0.02
CVE-2016-10526
HIGH
grunt-gh-pages < 0.9.1 - Unauthenticated Credential Exposure via Logging Function
May 31, 2018
CVSS 8.6
EPSS 0.02
CVE-2016-10524
HIGH
i18n-node-angular < 1.4.0 - Denial of Service via Unrestricted REST API Endpoint
May 31, 2018
CVSS 8.2
EPSS 0.01
CVE-2016-10523
HIGH
mqtt-packet < 3.4.6 - Denial of Service via Crafted MQTT Packets
May 31, 2018
CVSS 7.5
EPSS 0.02
CVE-2016-10521
HIGH
jshamcrest 0.6.7-0.7.0 - Regular Expression Denial of Service in Email Address Validator
May 31, 2018
CVSS 7.5
EPSS 0.01
CVE-2016-10520
HIGH
jadedown < 0.0.3 - Regular Expression Denial of Service
May 31, 2018
CVSS 7.5
EPSS 0.01
CVE-2016-10519
HIGH
bittorrent-dht < 5.1.3 - Information Disclosure via Message Sequence
May 31, 2018
CVSS 7.5
EPSS 0.02
CVE-2016-10518
HIGH
WS < 1.0.1 - Memory Corruption
May 31, 2018
CVSS 7.5
EPSS 0.02
CVE-2016-10698
HIGH
mystem-fix < 0.0.5 - Remote Code Execution via HTTP Resource Download
May 29, 2018
CVSS 8.1
EPSS 0.02
CVE-2016-10682
HIGH
massif < 0.0.1-1 - Remote Code Execution via MITM Resource Swapping
May 29, 2018
CVSS 8.1
EPSS 0.02
CVE-2016-10681
HIGH
roslibjs < 0.18.0 - Remote Code Execution via MITM Binary Resource Swapping
May 29, 2018
CVSS 8.1
EPSS 0.02
CVE-2016-10680
HIGH
adamvr-geoip-lite < 1.2.0 - Man-in-the-Middle Attack via HTTP Resource Download
May 29, 2018
CVSS 8.1
EPSS 0.01
CVE-2016-10679
HIGH
selenium-standalone-painful < 2.39.0-2.7.0 - Remote Code Execution via HTTP Resource Download
May 29, 2018
CVSS 8.1
EPSS 0.02
CVE-2016-10674
HIGH
limbus-buildgen < 0.1.1 - Remote Code Execution via MITM HTTP Resource Download
May 29, 2018
CVSS 8.1
EPSS 0.02
CVE-2016-10666
HIGH
tomita-parser < 0.0.3 - Remote Code Execution via HTTP Resource Download
May 29, 2018
CVSS 8.1
EPSS 0.02
CVE-2016-10659
HIGH
macchina/poco < 1.7.7 - Remote Code Execution via HTTP Source File Download
May 29, 2018
CVSS 8.1
EPSS 0.02
CVE-2016-10658
HIGH
native-opencv - Remote Code Execution via MITM Binary Download
May 29, 2018
CVSS 8.1
EPSS 0.02
Products
openclaw 433
n8n 110
parse-server 98
flowise 67
directus 55
nocodb 54
electron 49
next 47
vm2 41
hono 38
axios 33
undici 30
pnpm 25
ghost 22
vite 21
astro 19
tar 19
tinymce 18
protobufjs 16
ckeditor4 15
fuxa-server 15
jspdf 15
joplin 14
liquidjs 14
nodebb 14
sequelize 14
angular 13
flowise-components 13
react-router 13
signalk-server 13
Quick Filters