Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 1,793

Export CSV
CVE-2023-23918

Node.js: Permissions policies can be bypassed via process.mainModule

A privilege escalation vulnerability exists in Node.js <19.6.1, <18.14.1, <16.19.1 and <14.21.3 that made it possible to bypass the experimental Permissions (https://nodejs.org/api/permissions.html) feature in Node.js and access non authorized modules by using process.mainModule.require(). This only affects users who had enabled the experimental permissions option with --experimental-policy.

CVSS 3.1 · 7.5 High EPSS 2.0% KEV · Not listed
Vendors
Nodejs Redhat
Products
Node.js Enterprise Linux Rhel Eus and 1 more
CVE-2022-4244

Codehaus-plexus: directory traversal

A flaw was found in codeplex-codehaus. A directory traversal attack (also known as path traversal) aims to access files and directories stored outside the intended folder. By manipulating files with "dot-dot-slash (../)" sequences and their variations or by using absolute file paths, it may be possible to access arbitrary files and directories stored on the file system, including application source code, configuration, and other critical system files.

CVSS 3.1 · 7.5 High EPSS 1.3% KEV · Not listed
Vendors
Codehaus-plexus Redhat
Products
Plexus-utils A Mq Clients Amq Broker and 20 more
CVE-2020-11993

httpd: mod_http2 concurrent pool usage

Apache HTTP Server versions 2.4.20 to 2.4.43 When trace/debug was enabled for the HTTP/2 module and on certain traffic edge patterns, logging statements were made on the wrong connection, causing concurrent use of memory pools. Configuring the LogLevel of mod_http2 above "info" will mitigate this vulnerability for unpatched servers.

CVSS 3.1 · 7.5 High EPSS 56.6% KEV · Not listed
Vendors
Apache Canonical Debian and 5 more
Products
Http Server Ubuntu Linux Debian Linux and 13 more
CVE-2021-33193

Request splitting via HTTP/2 method injection and mod_proxy

A crafted method sent through HTTP/2 will bypass validation and be forwarded by mod_proxy, which can lead to request splitting or cache poisoning. This issue affects Apache HTTP Server 2.4.17 to 2.4.48.

CVSS 3.1 · 7.5 High EPSS 46.2% KEV · Not listed
Vendors
Apache Debian Fedoraproject and 3 more
Products
Http Server Debian Linux Fedora and 6 more
CVE-2021-39275

ap_escape_quotes buffer overflow

ap_escape_quotes() may write beyond the end of a buffer when given malicious input. No included modules pass untrusted data to these functions, but third-party / external modules may. This issue affects Apache HTTP Server 2.4.48 and earlier.

CVSS 3.1 · 9.8 Critical EPSS 39.4% KEV · Not listed
Vendors
Apache Debian Fedoraproject and 4 more
Products
Http Server Debian Linux Fedora and 11 more
CVE-2021-44790

Possible buffer overflow when parsing multipart content in mod_lua of Apache HTTP Server 2.4.51 and earlier

A carefully crafted request body can cause a buffer overflow in the mod_lua multipart parser (r:parsebody() called from Lua scripts). The Apache httpd team is not aware of an exploit for the vulnerabilty though it might be possible to craft one. This issue affects Apache HTTP Server 2.4.51 and earlier.

CVSS 3.1 · 9.8 Critical EPSS 96.8% KEV · Not listed
Vendors
Apache Apple Debian and 5 more
Products
Http Server Mac Os X Macos and 17 more
CVE-2022-23943

mod_sed: Read/write beyond bounds

Out-of-bounds Write vulnerability in mod_sed of Apache HTTP Server allows an attacker to overwrite heap memory with possibly attacker provided data. This issue affects Apache HTTP Server 2.4 version 2.4.52 and prior versions.

CVSS 3.1 · 9.8 Critical EPSS 50.4% KEV · Not listed
Vendors
Apache Debian Fedoraproject and 2 more
Products
Http Server Debian Linux Fedora and 5 more
CVE-2022-26377

mod_proxy_ajp: Possible request smuggling

Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in mod_proxy_ajp of Apache HTTP Server allows an attacker to smuggle requests to the AJP server it forwards requests to. This issue affects Apache HTTP Server Apache HTTP Server 2.4 version 2.4.53 and prior versions.

CVSS 3.1 · 7.5 High EPSS 21.1% KEV · Not listed
Vendors
Apache Fedoraproject Netapp and 1 more
Products
Http Server Fedora Clustered Data Ontap and 3 more
CVE-2022-31813

mod_proxy X-Forwarded-For dropped by hop-by-hop mechanism

Apache HTTP Server 2.4.53 and earlier may not send the X-Forwarded-* headers to the origin server based on client side Connection header hop-by-hop mechanism. This may be used to bypass IP based authentication on the origin server/application.

CVSS 3.1 · 9.8 Critical EPSS 3.5% KEV · Not listed
Vendors
Apache Fedoraproject Netapp and 1 more
Products
Http Server Fedora Clustered Data Ontap and 3 more
CVE-2022-45060

varnish: Request Forgery Vulnerability

An HTTP Request Forgery issue was discovered in Varnish Cache 5.x and 6.x before 6.0.11, 7.x before 7.1.2, and 7.2.x before 7.2.1. An attacker may introduce characters through HTTP/2 pseudo-headers that are invalid in the context of an HTTP/1 request line, causing the Varnish server to produce invalid HTTP/1 requests to the backend. This could, in turn, be used to exploit vulnerabilities in a server behind the Varnish server. Note: the 6.0.x LTS series (before 6.0.11) is affected.

CVSS 3.1 · 7.5 High EPSS 1.3% KEV · Not listed
Vendors
Debian Fedoraproject Redhat and 2 more
Products
Debian Linux Fedora Enterprise Linux and 8 more
CVE-2022-35256

nodejs: HTTP Request Smuggling due to incorrect parsing of header fields

The llhttp parser in the http module in Node v18.7.0 does not correctly handle header fields that are not terminated with CLRF. This may result in HTTP Request Smuggling.

CVSS 3.1 · 6.5 Medium EPSS 2.8% KEV · Not listed
Vendors
Debian Llhttp Nodejs and 2 more
Products
Debian Linux Llhttp Node.js and 4 more
CVE-2022-32213

nodejs: HTTP request smuggling due to flawed parsing of Transfer-Encoding

The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does not correctly parse and validate Transfer-Encoding headers and can lead to HTTP Request Smuggling (HRS).

CVSS 3.1 · 6.5 Medium EPSS 44.8% KEV · Not listed
Vendors
Debian Fedoraproject Llhttp and 4 more
Products
Debian Linux Fedora Llhttp and 6 more
CVE-2022-32212

nodejs: DNS rebinding in --inspect via invalid IP addresses

A OS Command Injection vulnerability exists in Node.js versions <14.20.0, <16.20.0, <18.5.0 due to an insufficient IsAllowedHost check that can easily be bypassed because IsIPAddress does not properly check if an IP address is invalid before making DBS requests allowing rebinding attacks.

CVSS 3.1 · 8.1 High EPSS 6.4% KEV · Not listed
Vendors
Debian Fedoraproject Nodejs and 2 more
Products
Debian Linux Fedora Node.js and 4 more
CVE-2022-32214

nodejs: HTTP request smuggling due to improper delimiting of header fields

The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does not strictly use the CRLF sequence to delimit HTTP requests. This can lead to HTTP Request Smuggling (HRS).

CVSS 3.1 · 6.5 Medium EPSS 81.8% KEV · Not listed
Vendors
Debian Llhttp Nodejs and 2 more
Products
Debian Linux Llhttp Node.js and 4 more
CVE-2022-32215

nodejs: HTTP request smuggling due to incorrect parsing of multi-line Transfer-Encoding

The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does not correctly handle multi-line Transfer-Encoding headers. This can lead to HTTP Request Smuggling (HRS).

CVSS 3.1 · 6.5 Medium EPSS 70.2% KEV · Not listed
Vendors
Debian Fedoraproject Llhttp and 4 more
Products
Debian Linux Fedora Llhttp and 6 more
CVE-2022-21824

nodejs: Prototype pollution via console.table properties

Due to the formatting logic of the "console.table()" function it was not safe to allow user controlled input to be passed to the "properties" parameter while simultaneously passing a plain object with at least one property as the first parameter, which could be "__proto__". The prototype pollution has very limited control, in that it only allows an empty string to be assigned to numerical keys of the object prototype.Node.js >= 12.22.9, >= 14.18.3, >= 16.13.2, and >= 17.3.1 use a null protoype for the object these properties are being assigned to.

CVSS 3.1 · 8.2 High EPSS 21.5% KEV · Not listed
Vendors
Debian Netapp Nodejs and 2 more
Products
Debian Linux Oncommand Insight Oncommand Workflow Automation and 13 more
CVE-2021-44532

nodejs: Certificate Verification Bypass via String Injection

Node.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 converts SANs (Subject Alternative Names) to a string format. It uses this string to check peer certificates against hostnames when validating connections. The string format was subject to an injection vulnerability when name constraints were used within a certificate chain, allowing the bypass of these name constraints.Versions of Node.js with the fix for this escape SANs containing the problematic characters in order to prevent the injection. This behavior can be reverted through the --security-revert command-line option.

CVSS 3.1 · 5.3 Medium EPSS 10.4% KEV · Not listed
Vendors
Debian Nodejs Oracle and 1 more
Products
Debian Linux Node.js Graalvm and 11 more
CVE-2021-44531

nodejs: Improper handling of URI Subject Alternative Names

Accepting arbitrary Subject Alternative Name (SAN) types, unless a PKI is specifically defined to use a particular SAN type, can result in bypassing name-constrained intermediates. Node.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 was accepting URI SAN types, which PKIs are often not defined to use. Additionally, when a protocol allows URI SANs, Node.js did not match the URI correctly.Versions of Node.js with the fix for this disable the URI SAN type when checking a certificate against a hostname. This behavior can be reverted through the --security-revert command-line option.

CVSS 3.1 · 7.4 High EPSS 8.4% KEV · Not listed
Vendors
Nodejs Oracle Redhat
Products
Node.js Graalvm Mysql Cluster and 10 more