Skip to content
Fencer Intel

All · Node.js

Newest first, late arrivals on top. Also a feed.

  1. 9.8
    CVE-2016-6303 Integer overflow in the MDC2_Update function in crypto/mdc2/mdc2dgst.c in OpenSSL before 1.1.0 allows remote attackers to cause a denial of…
    Node.jsOpenSSL
    EPSS 32.0% chance of exploitation in 30 days, percentile 98%
  2. 7.5
    CVE-2016-2183 The DES and Triple DES ciphers, as used in the TLS, SSH, and IPSec protocols and other protocols and products, have a birthday bound of app…
    Node.jsOpenSSLOracle Database
    EPSS 94.7% chance of exploitation in 30 days, percentile 99.8%
  3. 7.5
    CVE-2016-3956 npm Token Leak in npm
    Node.jsnpm
    EPSS 5.5% chance of exploitation in 30 days, percentile 92%
  4. 5.5
    CVE-2016-2178 The dsa_sign_setup function in crypto/dsa/dsa_ossl.c in OpenSSL through 1.0.2h does not properly ensure the use of constant-time operations…
    Node.jsOpenSSL
    EPSS 1.2% chance of exploitation in 30 days, percentile 69%
  5. 8.8
    CVE-2016-1669 The Zone::New function in zone.cc in Google V8 before 5.0.71.47, as used in Google Chrome before 50.0.2661.102, does not properly determine…
    Node.jsGoogle Chrome
    EPSS 4.3% chance of exploitation in 30 days, percentile 91%
  6. 5.9
    CVE-2016-2107 The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a certain padding che…
    Node.jsOpenSSL
    1 public exploit EPSS 89.1% chance of exploitation in 30 days, percentile 99.7%
  7. 7.5
    CVE-2016-2105 Integer overflow in the EVP_EncodeUpdate function in crypto/evp/encode.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote att…
    Node.jsOpenSSLMySQL
    EPSS 39.7% chance of exploitation in 30 days, percentile 98%
  8. 7.5
    CVE-2016-2216 The HTTP header parsing code in Node.js 0.10.x before 0.10.42, 0.11.6 through 0.11.16, 0.12.x before 0.12.10, 4.x before 4.3.0, and 5.x bef…
    Node.js
    EPSS 7.3% chance of exploitation in 30 days, percentile 94%
  9. 7.5
    CVE-2016-2086 Node.js 0.10.x before 0.10.42, 0.12.x before 0.12.10, 4.x before 4.3.0, and 5.x before 5.6.0 allow remote attackers to conduct HTTP request…
    Node.js
    EPSS 6.3% chance of exploitation in 30 days, percentile 93%
  10. 7.5
    CVE-2016-0797 Multiple integer overflows in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allow remote attackers to cause a denial of service (heap…
    Node.jsOpenSSL
    EPSS 27.0% chance of exploitation in 30 days, percentile 98%
  11. 5.1
    CVE-2016-0702 The MOD_EXP_CTIME_COPY_FROM_PREBUF function in crypto/bn/bn_exp.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g does not properly…
    Node.jsOpenSSL
    EPSS 1.9% chance of exploitation in 30 days, percentile 80%
  12. 7.5
    CVE-2015-8027 Node.js 0.12.x before 0.12.9, 4.x before 4.2.3, and 5.x before 5.1.1 does not ensure the availability of a parser for each HTTP socket, whi…
    Node.js
    EPSS 5.4% chance of exploitation in 30 days, percentile 92%
  13. 9.8
    CVE-2015-6764 The BasicJsonStringifier::SerializeJSArray function in json-stringifier.h in the JSON stringifier in Google V8, as used in Google Chrome be…
    Node.jsGoogle Chrome
    EPSS 5.7% chance of exploitation in 30 days, percentile 93%
  14. 7.5
    CVE-2015-3194 crypto/rsa/rsa_ameth.c in OpenSSL 1.0.1 before 1.0.1q and 1.0.2 before 1.0.2e allows remote attackers to cause a denial of service (NULL po…
    Node.jsOpenSSL
    EPSS 44.0% chance of exploitation in 30 days, percentile 98%
  15. 7.5
    CVE-2015-3193 The Montgomery squaring implementation in crypto/bn/asm/x86_64-mont5.pl in OpenSSL 1.0.2 before 1.0.2e on the x86_64 platform, as used by t…
    Node.jsOpenSSL
    EPSS 25.1% chance of exploitation in 30 days, percentile 97%
  16. 7.5
    CVE-2015-5380 The Utf8DecoderBase::WriteUtf16Slow function in unicode-decoder.cc in Google V8, as used in Node.js before 0.12.6, io.js before 1.8.3 and 2…
    Node.js
    EPSS 3.0% chance of exploitation in 30 days, percentile 87%
  17. 10.0
    CVE-2015-0278 libuv before 0.10.34 does not properly drop group privileges, which allows context-dependent attackers to gain privileges via unspecified v…
    Node.js
    EPSS 3.2% chance of exploitation in 30 days, percentile 88%
  18. 5.0
    CVE-2014-7191 Denial-of-Service Memory Exhaustion in qs
    Node.jsnpm
    EPSS 8.3% chance of exploitation in 30 days, percentile 95%
  19. 7.4
    CVE-2014-0224 OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCipherSpec messages, wh…
    Node.jsOpenSSLMariaDB
    1 public exploit EPSS 95.3% chance of exploitation in 30 days, percentile 99.8%
  20. 7.5
    CVE-2013-6668 Multiple unspecified vulnerabilities in Google V8 before 3.24.35.10, as used in Google Chrome before 33.0.1750.146, allow attackers to caus…
    Node.jsGoogle Chrome
    EPSS 5.6% chance of exploitation in 30 days, percentile 93%
  21. 7.5
    CVE-2013-2882 Google V8, as used in Google Chrome before 28.0.1500.95, allows remote attackers to cause a denial of service or possibly have unspecified…
    Node.jsGoogle Chrome
    EPSS 3.2% chance of exploitation in 30 days, percentile 88%