Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

nodejs node.js 0.12.6 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv3
CVE-2015-8027
Node.js 0.12.x prior to 0.12.9, 4.x prior to 4.2.3, and 5.x prior to 5.1.1 does not ensure the availability of a parser for each HTTP socket, which allows remote malicious users to cause a denial of service (uncaughtException and service outage) via a pipelined HTTP request.
Nodejs Node.js 0.12.7Nodejs Node.js 0.12.6Nodejs Node.js 5.1.0Nodejs Node.js 5.0.0Nodejs Node.js 0.12.4Nodejs Node.js 0.12.3Nodejs Node.js 4.2.0Nodejs Node.js 0.12.8Nodejs Node.js 0.12.1Nodejs Node.js 0.12.5Nodejs Node.js 4.2.2Nodejs Node.js 4.2.1Nodejs Node.js 0.12.2Nodejs Node.js 0.12.0
7.5
CVSSv3
CVE-2016-2086
Node.js 0.10.x prior to 0.10.42, 0.12.x prior to 0.12.10, 4.x prior to 4.3.0, and 5.x prior to 5.6.0 allow remote malicious users to conduct HTTP request smuggling attacks via a crafted Content-Length HTTP header.
Nodejs Node.js 5.2.0Nodejs Node.js 5.1.1Nodejs Node.js 4.2.1Nodejs Node.js 4.2.0Nodejs Node.js 0.12.7Nodejs Node.js 0.12.6Nodejs Node.js 0.10.9Nodejs Node.js 0.10.8Nodejs Node.js 0.10.38Nodejs Node.js 0.10.37Nodejs Node.js 0.10.30Nodejs Node.js 0.10.3Nodejs Node.js 0.10.23Nodejs Node.js 0.10.22Nodejs Node.js 0.10.16Nodejs Node.js 0.10.15Nodejs Node.js 0.10.0Nodejs Node.js 5.4.0Nodejs Node.js 5.3.0Nodejs Node.js 4.2.4Nodejs Node.js 5.1.0Nodejs Node.js 5.0.0
7.5
CVSSv3
CVE-2016-3956
The CLI in npm prior to 2.15.1 and 3.x prior to 3.8.3, as used in Node.js 0.10 prior to 0.10.44, 0.12 prior to 0.12.13, 4 prior to 4.4.2, and 5 prior to 5.10.0, includes bearer tokens with arbitrary requests, which allows remote HTTP servers to obtain sensitive information by rea...
Ibm SdkNodejs Node.js 5.6.0Nodejs Node.js 4.4.0Nodejs Node.js 4.3.2Nodejs Node.js 4.3.1Nodejs Node.js 5.2.0Nodejs Node.js 5.1.0Nodejs Node.js 4.2.1Nodejs Node.js 4.1.2Nodejs Node.js 0.12.8Nodejs Node.js 0.12.6Nodejs Node.js 0.10.9Nodejs Node.js 0.10.7Nodejs Node.js 0.10.38Nodejs Node.js 0.10.36Nodejs Node.js 0.10.31Nodejs Node.js 0.10.3Nodejs Node.js 0.10.23Nodejs Node.js 0.10.21Nodejs Node.js 0.10.16Nodejs Node.js 0.10.14Nodejs Node.js 0.10.1
7.5
CVSSv3
CVE-2016-2216
The HTTP header parsing code in Node.js 0.10.x prior to 0.10.42, 0.11.6 up to and including 0.11.16, 0.12.x prior to 0.12.10, 4.x prior to 4.3.0, and 5.x prior to 5.6.0 allows remote malicious users to bypass an HTTP response-splitting protection mechanism via UTF-8 encoded Unico...
Nodejs Node.js 5.3.0Nodejs Node.js 5.2.0Nodejs Node.js 4.2.2Nodejs Node.js 4.2.1Nodejs Node.js 0.12.8Nodejs Node.js 0.12.7Nodejs Node.js 0.12.0Nodejs Node.js 0.11.16Nodejs Node.js 0.11.15Nodejs Node.js 0.11.8Nodejs Node.js 0.11.7Nodejs Node.js 0.10.41Nodejs Node.js 0.10.40Nodejs Node.js 0.10.33Nodejs Node.js 0.10.32Nodejs Node.js 5.1.1Nodejs Node.js 5.1.0Nodejs Node.js 5.0.0Nodejs Node.js 4.2.0Nodejs Node.js 4.1.2Nodejs Node.js 0.12.6Nodejs Node.js 0.12.5
NA
CVE-2015-5380
The Utf8DecoderBase::WriteUtf16Slow function in unicode-decoder.cc in Google V8, as used in Node.js prior to 0.12.6, io.js prior to 1.8.3 and 2.x prior to 2.3.3, and other products, does not verify that there is memory available for a UTF-16 surrogate pair, which allows remote ma...
Google V8 -Iojs Io.js 2.0.0Iojs Io.js 2.3.2Iojs Io.js 2.0.2Iojs Io.js 2.2.0Iojs Io.js 2.0.1Iojs Io.js 2.1.0Iojs Io.js 2.3.1Iojs Io.js 2.3.0Iojs Io.jsIojs Io.js 2.2.1Nodejs Node.js
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322CVE-2006-4304wirelessCVE-2023-23022local file inclusionCVE-2024-27058CVE-2024-33820open redirectCVE-2024-27079
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook