npm
4,315 tracked vulnerabilities.
CVE-2016-10650
HIGH
ntfserver < 0.0.18 - Remote Code Execution via MITM Binary Swap
May 29, 2018
CVSS 8.1
EPSS 0.02
CVE-2016-10635
HIGH
broccoli-closure < 1.3.1 - Remote Code Execution via HTTP Binary Download
May 29, 2018
CVSS 8.1
EPSS 0.02
CVE-2016-10627
HIGH
scala-bin < 0.3.3 - Remote Code Execution via MITM Binary Download
May 29, 2018
CVSS 8.1
EPSS 0.02
CVE-2016-10611
HIGH
strider-sauce < 0.6.3 - Remote Code Execution via MITM HTTP Resource Download
May 29, 2018
CVSS 8.1
EPSS 0.02
CVE-2016-10601
HIGH
webdrvr < 2.43.0-1 - Remote Code Execution via MITM Binary Download
May 29, 2018
CVSS 8.1
EPSS 0.02
CVE-2016-10593
HIGH
ibapi < 2.4.2 - Remote Code Execution via MITM Binary Swap
May 29, 2018
CVSS 8.1
EPSS 0.02
CVE-2016-10591
HIGH
Prince 1.4.4-1.4.5 and npm/prince < 1.4.7 - Remote Code Execution via MITM Tarball Swap
May 29, 2018
CVSS 8.1
EPSS 0.02
CVE-2016-10590
HIGH
cue-sdk-node < 1.2.0 - Remote Code Execution via HTTP Resource Download
May 29, 2018
CVSS 8.1
EPSS 0.02
CVE-2016-10589
HIGH
selenium-binaries < 0.10.0 and >= 0 < 0.15.0 - Remote Code Execution via MITM Binary Swapping
May 29, 2018
CVSS 8.1
EPSS 0.02
CVE-2016-10586
HIGH
macaca-chromedriver < 1.0.29 - Remote Code Execution via HTTP Binary Download
May 29, 2018
CVSS 8.1
EPSS 0.02
CVE-2016-10584
HIGH
dalekjs/dalekjs < 0.0.11 - Remote Code Execution via MITM Binary Swap
May 29, 2018
CVSS 8.1
EPSS 0.02
CVE-2016-10578
HIGH
unicode < 9.0.0 - Man-in-the-Middle Attack via HTTP Resource Download
May 29, 2018
CVSS 8.1
EPSS 0.01
CVE-2016-10577
HIGH
ibm_db < 1.0.2 - Remote Code Execution via MITM Binary Download
May 29, 2018
CVSS 8.1
EPSS 0.02
CVE-2016-10573
HIGH
baryton-saxophone < 3.0.1 - Remote Code Execution via HTTP Binary Download
May 29, 2018
CVSS 8.1
EPSS 0.02
CVE-2016-10570
HIGH
pngcrush-installer < 1.8.10 - Remote Code Execution via HTTP Binary Download
May 29, 2018
CVSS 8.1
EPSS 0.02
CVE-2016-10568
HIGH
geoip-lite-country < 1.1.4 - Man-in-the-Middle Data Resource Download
May 29, 2018
CVSS 8.1
EPSS 0.01
CVE-2016-10567
HIGH
product-monitor < 2.2.5 - Remote Code Execution via MITM JavaScript Resource Download
May 29, 2018
CVSS 8.1
EPSS 0.02
CVE-2016-10566
HIGH
install-nw < 1.1.5 - Remote Code Execution via MITM Binary Swap
May 29, 2018
CVSS 8.1
EPSS 0.02
CVE-2016-10559
HIGH
selenium-download < 2.0.7 - Remote Code Execution via HTTP Binary Download
May 29, 2018
CVSS 8.1
EPSS 0.02
CVE-2016-10558
HIGH
aerospike < 2.4.2 - Remote Code Execution via MITM Binary Download
May 29, 2018
CVSS 8.1
EPSS 0.02
CVE-2016-10556
HIGH
sequelize < 3.19.3 - SQL Injection via Array Parameter Handling
May 29, 2018
CVSS 7.5
EPSS 0.01
CVE-2016-10551
CRITICAL
waterline-sequel < 0.5.1 - SQL Injection via Like/Contains/StartsWith/EndsWith Input
May 29, 2018
CVSS 9.8
EPSS 0.02
CVE-2016-10525
CRITICAL
hapi-auth-jwt2 5.1.1 - Unauthenticated Authentication Bypass via 'try' Mode
May 29, 2018
CVSS 9.8
EPSS 0.03
CVE-2016-10707
HIGH
jQuery 3.0.0-rc.1 - Denial of Service via Mixed-Case Boolean Attribute Recursion
Jan 18, 2018
CVSS 7.5
EPSS 0.03
CVE-2016-10703
HIGH
ecstatic < 2.0.0 - Denial of Service via Malicious String Input
Dec 14, 2017
CVSS 7.5
EPSS 0.03
Products
openclaw 433
n8n 110
parse-server 98
flowise 67
directus 55
nocodb 54
electron 49
next 47
vm2 41
hono 38
axios 33
undici 30
pnpm 25
ghost 22
vite 21
astro 19
tar 19
tinymce 18
protobufjs 16
ckeditor4 15
fuxa-server 15
jspdf 15
joplin 14
liquidjs 14
nodebb 14
sequelize 14
angular 13
flowise-components 13
react-router 13
signalk-server 13
Quick Filters