Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

nodejs node.js 6.0.0 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv3
CVE-2017-11499
Node.js v4.0 through v4.8.3, all versions of v5.x, v6.0 through v6.11.0, v7.0 through v7.10.0, and v8.0 through v8.1.3 was susceptible to hash flooding remote DoS attacks as the HashTable seed was constant across a given released version of Node.js. This was a result of building ...
Nodejs Node.js 8.0.0Nodejs Node.js 7.0.0Nodejs Node.js 7.4.0Nodejs Node.js 7.5.0Nodejs Node.js 7.9.0Nodejs Node.js 6.0.0Nodejs Node.js 6.11.1Nodejs Node.js 6.2.0Nodejs Node.js 6.6.0Nodejs Node.js 6.7.0Nodejs Node.js 6.9.5Nodejs Node.js 5.0.0Nodejs Node.js 5.12.0Nodejs Node.js 5.2.0Nodejs Node.js 5.7.1Nodejs Node.js 5.8.0Nodejs Node.js 4.2.1Nodejs Node.js 4.2.2Nodejs Node.js 4.3.2Nodejs Node.js 4.4.0Nodejs Node.js 4.4.7Nodejs Node.js 4.5.0
7.5
CVSSv3
CVE-2021-33502
The normalize-url package prior to 4.5.1, 5.x prior to 5.3.1, and 6.x prior to 6.0.1 for Node.js has a ReDoS (regular expression denial of service) issue because it has exponential performance for data: URLs.
Normalize-url Project Normalize-urlNormalize-url Project Normalize-url 6.0.0
7.5
CVSSv3
CVE-2023-44487
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
Ietf Http 2.0Nghttp2 Nghttp2Netty NettyEnvoyproxy Envoy 1.27.0Envoyproxy Envoy 1.26.4Envoyproxy Envoy 1.25.9Envoyproxy Envoy 1.24.10Eclipse JettyCaddyserver CaddyGolang Http2Golang GoGolang NetworkingF5 Big-ip AnalyticsF5 Big-ip Policy Enforcement ManagerF5 Big-ip Local Traffic ManagerF5 Big-ip Link ControllerF5 Big-ip Global Traffic ManagerF5 Big-ip Fraud Protection ServiceF5 Big-ip Domain Name SystemF5 Big-ip Application Security ManagerF5 Big-ip Application Acceleration ManagerF5 Big-ip Advanced Firewall Manager
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322CVE-2006-4304wirelessCVE-2023-23022local file inclusionCVE-2024-27058CVE-2024-33820open redirectCVE-2024-27079
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook