2018

The no-case module is vulnerable to regular expression denial of service. When malicious untrusted user input is passed

charset 1.0.0 and below are vulnerable to regular expression denial of service. Input of around 50k characters is requir

tiny-http is a simple http server. tiny-http is vulnerable to a directory traversal issue, giving an attacker access to

serveryaozeyan is a simple HTTP server. serveryaozeyan is vulnerable to a directory traversal issue, giving an attacker

serverliujiayi1 is a simple http server. serverliujiayi1 is vulnerable to a directory traversal issue, giving an attacke

iter-http is a server for static files. iter-http is vulnerable to a directory traversal issue, giving an attacker acces

cyber-js is a simple http server. A cyberjs server is vulnerable to a directory traversal issue, giving an attacker acce

Sencisho is a simple http server for local development. Sencisho is vulnerable to a directory traversal issue, giving an

xtalk helps your browser talk to nodex, a simple web framework. xtalk is vulnerable to a directory traversal issue, givi

fsk-server is a simple http server. fsk-server is vulnerable to a directory traversal issue, giving an attacker access t

serverlyr is a simple http server. serverlyr is vulnerable to a directory traversal issue, giving an attacker access to

ua-parser is a port of Browserscope's user agent parser. ua-parser is vulnerable to a ReDoS (Regular Expression Denial o

tinyserver2 is a webserver for static files. tinyserver2 is vulnerable to a directory traversal issue, giving an attacke

list-n-stream is a server for static files to list and stream local videos. list-n-stream v0.0.10 or lower is vulnerable

node-simple-router is a minimalistic router for Node. node-simple-router is vulnerable to a directory traversal issue, g

cross-env.js was a malicious module published with the intent to hijack environment variables. It has been unpublished b

nodesass was a malicious module published with the intent to hijack environment variables. It has been unpublished by np

smb was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.

shadowsock was a malicious module published with the intent to hijack environment variables. It has been unpublished by

mongose was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm

proxy.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by np

http-proxy.js was a malicious module published with the intent to hijack environment variables. It has been unpublished

crossenv was a malicious module published with the intent to hijack environment variables. It has been unpublished by np

noderequest was a malicious module published with the intent to hijack environment variables. It has been unpublished by

nodemailer.js was a malicious module published with the intent to hijack environment variables. It has been unpublished

nodemailer-js was a malicious module published with the intent to hijack environment variables. It has been unpublished

nodecaffe was a malicious module published with the intent to hijack environment variables. It has been unpublished by n

nodeffmpeg was a malicious module published with the intent to hijack environment variables. It has been unpublished by

ffmepg was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.

node-opencv was a malicious module published with the intent to hijack environment variables. It has been unpublished by

opencv.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by n

openssl.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by

node-openssl was a malicious module published with the intent to hijack environment variables. It has been unpublished b

node-opensl was a malicious module published with the intent to hijack environment variables. It has been unpublished by

babelcli was a malicious module published with the intent to hijack environment variables. It has been unpublished by np

mssql-node was a malicious module published with the intent to hijack environment variables. It has been unpublished by

gruntcli was a malicious module published with the intent to hijack environment variables. It has been unpublished by np

nodemssql was a malicious module published with the intent to hijack environment variables. It has been unpublished by n

mssql.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by np

In the function csr_update_fils_params_rso(), insufficient validation on a key length can result in an integer underflow

A Use After Free condition can occur in the IPA driver whenever the IPA IOCTLs IPA_IOC_NOTIFY_WAN_UPSTREAM_ROUTE_ADD/IPA

A race condition in drm_atomic_nonblocking_commit() in the display driver can potentially lead to a Use After Free scena

dcc_curr_list is initialized with a default invalid value that is expected to be programmed by the user through a sysfs

Buffer Copy without Checking Size of Input can occur during the DRM SDE driver initialization sequence in all Android re

An exploitable denial of service vulnerability exists in the Ocularis Recorder functionality of Ocularis 5.5.0.242. A sp

Stack-based buffer overflow can occur In the WLAN driver if the pmkid_count value is larger than the PMKIDCache size in

Type mismatch for ie_len can cause the WLAN driver to allocate less memory on the heap due to implicit casting leading t

While sending a probe request indication in lim_send_sme_probe_req_ind() in all Android releases from CAF (Android for M

A crafted binder request can cause an arbitrary unmap in MediaServer in all Android releases from CAF (Android for MSM,

Cloud Foundry Diego, release versions prior to 2.8.0, does not properly sanitize file paths in tar and zip files headers