Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

nodejs node.js 8.1.1 vulnerabilities and exploits

(subscribe to this query)
5
CVSSv2
CVE-2017-14919
Node.js prior to 4.8.5, 6.x prior to 6.11.5, and 8.x prior to 8.8.0 allows remote malicious users to cause a denial of service (uncaught exception and crash) by leveraging a change in the zlib module 1.2.9 making 8 an invalid value for the windowBits parameter.
Nodejs Node.js 4.8.3Nodejs Node.js 4.8.4Nodejs Node.js 6.10.2Nodejs Node.js 6.10.3Nodejs Node.js 8.3.0Nodejs Node.js 8.4.0Nodejs Node.js 8.5.0Nodejs Node.js 8.6.0Nodejs Node.js 6.11.1Nodejs Node.js 6.11.3Nodejs Node.js 8.1.2Nodejs Node.js 8.1.4Nodejs Node.js 8.2.1Nodejs Node.js 8.7.0Nodejs Node.js 6.11.4Nodejs Node.js 8.0.0Nodejs Node.js 8.1.0Nodejs Node.js 8.1.1Nodejs Node.js 4.8.2Nodejs Node.js 6.11.0Nodejs Node.js 6.11.2Nodejs Node.js 8.1.3
5
CVSSv2
CVE-2017-11499
Node.js v4.0 through v4.8.3, all versions of v5.x, v6.0 through v6.11.0, v7.0 through v7.10.0, and v8.0 through v8.1.3 was susceptible to hash flooding remote DoS attacks as the HashTable seed was constant across a given released version of Node.js. This was a result of building ...
Nodejs Node.js 8.0.0Nodejs Node.js 7.0.0Nodejs Node.js 7.4.0Nodejs Node.js 7.5.0Nodejs Node.js 7.9.0Nodejs Node.js 6.0.0Nodejs Node.js 6.11.1Nodejs Node.js 6.2.0Nodejs Node.js 6.6.0Nodejs Node.js 6.7.0Nodejs Node.js 6.9.5Nodejs Node.js 5.0.0Nodejs Node.js 5.12.0Nodejs Node.js 5.2.0Nodejs Node.js 5.7.1Nodejs Node.js 5.8.0Nodejs Node.js 4.2.1Nodejs Node.js 4.2.2Nodejs Node.js 4.3.2Nodejs Node.js 4.4.0Nodejs Node.js 4.4.7Nodejs Node.js 4.5.0
4.3
CVSSv2
CVE-2018-0734
The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a (Affected 1.1.1). Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fi...
Openssl Openssl 1.1.1Openssl OpensslCanonical Ubuntu Linux 16.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 18.10Debian Debian Linux 9.0Nodejs Node.jsNodejs Node.js 10.13.0Netapp Cn1610 Firmware -Netapp Cloud Backup -Netapp Oncommand Unified ManagerNetapp Steelstore -Netapp Santricity Smi-s Provider -Netapp Snapcenter -Netapp Storage Automation Store -Oracle Api Gateway 11.1.2.4.0Oracle Peoplesoft Enterprise Peopletools 8.55Oracle Peoplesoft Enterprise Peopletools 8.56Oracle Enterprise Manager Ops Center 12.3.3Oracle Peoplesoft Enterprise Peopletools 8.57Oracle Mysql Enterprise Backup
7.8
CVSSv2
CVE-2019-9517
Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service. The attacker opens the HTTP/2 window so the peer can send without constraint; however, they leave the TCP window closed so the peer cannot actually writ...
Apple SwiftnioApache Traffic ServerApache Http ServerCanonical Ubuntu Linux 16.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 19.04Debian Debian Linux 9.0Debian Debian Linux 10.0Synology Skynas -Synology Diskstation Manager 6.2Synology Vs960hd Firmware -Fedoraproject Fedora 29Fedoraproject Fedora 30Opensuse Leap 15.0Opensuse Leap 15.1Redhat Software Collections 1.0Redhat Jboss Core Services 1.0Redhat Enterprise Linux 8.0Redhat Jboss Enterprise Application Platform 7.2.0Redhat Quay 3.0.0Redhat Openshift Service Mesh 1.0Redhat Jboss Enterprise Application Platform 7.3.0
1.9
CVSSv2
CVE-2018-5407
Simultaneous Multi-threading (SMT) in processors can enable local users to exploit software vulnerable to timing attacks via a side-channel timing attack on 'port contention'.
Canonical Ubuntu Linux 16.04Canonical Ubuntu Linux 14.04Canonical Ubuntu Linux 18.04Canonical Ubuntu Linux 18.10Debian Debian Linux 8.0Debian Debian Linux 9.0Nodejs Node.jsOpenssl OpensslTenable NessusOracle Primavera P6 Enterprise Project Portfolio Management 16.2Oracle Api Gateway 11.1.2.4.0Oracle Primavera P6 Enterprise Project Portfolio Management 15.1Oracle Primavera P6 Enterprise Project Portfolio Management 16.1Oracle Primavera P6 Enterprise Project Portfolio Management 15.2Oracle Peoplesoft Enterprise Peopletools 8.55Oracle Primavera P6 Enterprise Project Portfolio Management 8.4Oracle Peoplesoft Enterprise Peopletools 8.56Oracle Enterprise Manager Ops Center 12.3.3Oracle Peoplesoft Enterprise Peopletools 8.57Oracle Primavera P6 Enterprise Project Portfolio ManagementOracle Primavera P6 Enterprise Project Portfolio Management 18.8Oracle Vm Virtualbox
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322cross-site request forgeryunauthorizedCVE-2024-33925reflected XSSCVE-2023-51580CVE-2023-51579CVE-2015-2051CVE-2023-51609
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook