Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
nodejs node.js 8.5.0 vulnerabilities and exploits
(subscribe to this query)
5
CVSSv2
CVE-2017-14849
Node.js 8.5.0 prior to 8.6.0 allows remote malicious users to access unintended files, because a change to ".." handling was incompatible with the pathname validation used by unspecified community modules.
Nodejs Node.js 8.5.0
6 Github repositories
5
CVSSv2
CVE-2017-14919
Node.js prior to 4.8.5, 6.x prior to 6.11.5, and 8.x prior to 8.8.0 allows remote malicious users to cause a denial of service (uncaught exception and crash) by leveraging a change in the zlib module 1.2.9 making 8 an invalid value for the windowBits parameter.
Nodejs Node.js 4.8.3
Nodejs Node.js 4.8.4
Nodejs Node.js 6.10.2
Nodejs Node.js 6.10.3
Nodejs Node.js 8.3.0
Nodejs Node.js 8.4.0
Nodejs Node.js 8.5.0
Nodejs Node.js 8.6.0
Nodejs Node.js 6.11.1
Nodejs Node.js 6.11.3
Nodejs Node.js 8.1.2
Nodejs Node.js 8.1.4
Nodejs Node.js 8.2.1
Nodejs Node.js 8.7.0
Nodejs Node.js 6.11.4
Nodejs Node.js 8.0.0
Nodejs Node.js 8.1.0
Nodejs Node.js 8.1.1
Nodejs Node.js 4.8.2
Nodejs Node.js 6.11.0
Nodejs Node.js 6.11.2
Nodejs Node.js 8.1.3
NA
CVE-2023-44487
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
Ietf Http 2.0
Nghttp2 Nghttp2
Netty Netty
Envoyproxy Envoy 1.27.0
Envoyproxy Envoy 1.26.4
Envoyproxy Envoy 1.25.9
Envoyproxy Envoy 1.24.10
Eclipse Jetty
Caddyserver Caddy
Golang Http2
Golang Go
Golang Networking
F5 Big-ip Analytics
F5 Big-ip Policy Enforcement Manager
F5 Big-ip Local Traffic Manager
F5 Big-ip Link Controller
F5 Big-ip Global Traffic Manager
F5 Big-ip Fraud Protection Service
F5 Big-ip Domain Name System
F5 Big-ip Application Security Manager
F5 Big-ip Application Acceleration Manager
F5 Big-ip Advanced Firewall Manager
34 Github repositories
2 Articles
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3581
reflected XSS
CVE-2024-26925
CVE-2024-27956
LFI
CVE-2024-3607
CVE-2024-3107
CVE-2024-3295
SQL
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started