Export limit exceeded: 425850 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2018-3747

The public node module versions <= 1.0.3 allows to embed HTML in file names, which (in certain conditions) might lead to execute malicious JavaScript.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Public.js Project
Products
Public.js
CVE-2018-3731

public node module suffers from a Path Traversal vulnerability due to lack of validation of filePath, which allows a malicious user to read content of any file with known path.

CVSS 3.1 · 7.5 High EPSS 2.0% KEV · Not listed
Vendors
Public.js Project
Products
Public.js