Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 3

Export CSV
CVE-2018-12122

nodejs: Slowloris HTTP Denial of Service

Node.js: All versions prior to Node.js 6.15.0, 8.14.0, 10.14.0 and 11.3.0: Slowloris HTTP Denial of Service: An attacker can cause a Denial of Service (DoS) by sending headers very slowly keeping HTTP or HTTPS connections and associated resources alive for a long period of time.

CVSS 3.1 · 7.5 High EPSS 41.3% KEV · Not listed
Vendors
Nodejs Redhat Suse
Products
Node.js Rhel Software Collections Suse Enterprise Storage and 2 more
CVE-2018-12116

nodejs: HTTP request splitting

Node.js: All versions prior to Node.js 6.15.0 and 8.14.0: HTTP request splitting: If Node.js can be convinced to use unsanitized user-provided Unicode data for the `path` option of an HTTP request, then data can be provided which will trigger a second, unexpected, and user-defined HTTP request to made to the same server.

CVSS 3.1 · 7.5 High EPSS 4.6% KEV · Not listed
Vendors
Nodejs Redhat Suse
Products
Node.js Rhel Software Collections Suse Enterprise Storage and 2 more
CVE-2015-7976

ntp: 'ntpq saveconfig' command allows dangerous characters in filenames

The ntpq saveconfig command in NTP 4.1.2, 4.2.x before 4.2.8p6, 4.3, 4.3.25, 4.3.70, and 4.3.77 does not properly filter special characters, which allows attackers to cause unspecified impact via a crafted filename.

CVSS 3.0 · 4.3 Medium EPSS 3.6% KEV · Not listed
Vendors
Novell Ntp Opensuse and 1 more
Products
Suse Openstack Cloud Ntp Leap and 7 more