Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-16118 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-17T01:06:51.232Z Vendors: HackerOne Products: forwarded node module Problem Types: CWE-400 Description: The forwarded module is used by the Express.js framework to handle the X-Forwarded-For header. It is vulnerable to a regular expression denial of service when it's passed specially crafted input to parse. This causes the event loop to be blocked causing a denial of service condition. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/527 - http://www.securityfocus.com/bid/104427
CVE ID: CVE-2017-16119 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-17T01:52:08.005Z Vendors: HackerOne Products: fresh node module Problem Types: CWE-400 Description: Fresh is a module used by the Express.js framework for HTTP response freshness testing. It is vulnerable to a regular expression denial of service when it is passed specially crafted input to parse. This causes the event loop to be blocked causing a denial of service condition. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/526
CVE ID: CVE-2017-16120 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-17T01:31:37.503Z Vendors: HackerOne Products: liyujing node module Problem Types: CWE-22 Description: liyujing is a static file server. liyujing is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/liyujing - https://nodesecurity.io/advisories/387
CVE ID: CVE-2017-16121 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-17T02:15:46.516Z Vendors: HackerOne Products: datachannel-client node module Problem Types: CWE-22 Description: datachannel-client is a signaling implementation for DataChannel.js. datachannel-client is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/391 - https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/datachannel-client
CVE ID: CVE-2017-16122 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-16T20:06:39.019Z Vendors: HackerOne Products: cuciuci node module Problem Types: CWE-22 Description: cuciuci is a simple fileserver. cuciuci is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/381 - https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/cuciuci
CVE ID: CVE-2017-16123 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-16T17:49:01.423Z Vendors: HackerOne Products: welcomyzt node module Problem Types: CWE-22 Description: welcomyzt is a simple file server. welcomyzt is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/388 - https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/pooledwebsocket
CVE ID: CVE-2017-16124 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-16T18:19:41.237Z Vendors: HackerOne Products: node-server-forfront node module Problem Types: CWE-22 Description: node-server-forfront is a simple static file server. node-server-forfront is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/382 - https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/node-server-forfront
CVE ID: CVE-2017-16125 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-17T03:12:53.281Z Vendors: HackerOne Products: rtcmulticonnection-client node module Problem Types: CWE-22 Description: rtcmulticonnection-client is a signaling implementation for RTCMultiConnection.js, a multi-session manager. rtcmulticonnection-client is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/rtcmulticonnection-client - https://nodesecurity.io/advisories/385
CVE ID: CVE-2017-16126 State: PUBLISHED Published: 2018-06-07T02:00:00 Last Updated: 2024-08-05T20:13:07.351Z Vendors: n/a Products: n/a Problem Types: n/a Description: The module botbait is a tool to be used to track bot and automated tools usage with-in the npm ecosystem. botbait is known to record and track user information. The module tracks the following information. Source IP process.versions process.platform How the module was invoked (test, require, pre-install) Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/483
CVE ID: CVE-2017-16127 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-16T22:51:09.864Z Vendors: HackerOne Products: pandora-doomsday node module Problem Types: CWE-509 Description: The module pandora-doomsday infects other modules. It's since been unpublished from the registry. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/482
CVE ID: CVE-2017-16128 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-16T22:31:18.523Z Vendors: HackerOne Products: npm-script-demo node module Problem Types: CWE-506 Description: The module npm-script-demo opened a connection to a command and control server. It has been removed from the npm registry. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/481
CVE ID: CVE-2017-16129 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-16T19:04:07.190Z Vendors: HackerOne Products: superagent node module Problem Types: CWE-409 Description: The HTTP client module superagent is vulnerable to ZIP bomb attacks. In a ZIP bomb attack, the HTTP server replies with a compressed response that becomes several magnitudes larger once uncompressed. If a client does not take special care when processing such responses, it may result in excessive CPU and/or memory consumption. An attacker might exploit such a weakness for a DoS attack. To exploit this the attacker must control the location (URL) that superagent makes a request to. Additional Anal
attack. To exploit this the attacker must control the location (URL) that superagent makes a request to. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/479 - https://github.com/visionmedia/superagent/issues/1259
CVE ID: CVE-2017-16130 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-17T03:43:42.412Z Vendors: HackerOne Products: exxxxxxxxxxx node module Problem Types: CWE-22 Description: exxxxxxxxxxx is an Http eX Frame Google Style JavaScript Guide. exxxxxxxxxxx is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. Accessible files are restricted to those with a file extension. Files with no extension such as /etc/passwd throw an error. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/478 - https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/
s: - https://nodesecurity.io/advisories/478 - https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/exxxxxxxxxxx
CVE ID: CVE-2017-16131 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-16T18:49:18.988Z Vendors: HackerOne Products: unicorn-list node module Problem Types: CWE-22 Description: unicorn-list is a web framework. unicorn-list is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/477 - https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/unicorn-list
CVE ID: CVE-2017-16132 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-16T17:32:42.217Z Vendors: HackerOne Products: simple-npm-registry node module Problem Types: CWE-22 Description: simple-npm-registry is a local npm package cache. simple-npm-registry is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/452 - https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/simple-npm-registry
CVE ID: CVE-2017-16133 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-16T23:56:43.157Z Vendors: HackerOne Products: goserv node module Problem Types: CWE-22 Description: goserv is an http server. goserv is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/goserv - https://nodesecurity.io/advisories/473
CVE ID: CVE-2017-16134 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-16T23:55:30.030Z Vendors: HackerOne Products: http_static_simple node module Problem Types: CWE-22 Description: http_static_simple is an http server. http_static_simple is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/472 - https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/http_static_simple
CVE ID: CVE-2017-16135 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-16T20:52:07.631Z Vendors: HackerOne Products: serverzyy node module Problem Types: CWE-22 Description: serverzyy is a static file server. serverzyy is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/serverzyy - https://nodesecurity.io/advisories/431
CVE ID: CVE-2017-16136 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-17T03:18:13.960Z Vendors: HackerOne Products: method-override node module Problem Types: CWE-400 Description: method-override is a module used by the Express.js framework to let you use HTTP verbs such as PUT or DELETE in places where the client doesn't support it. method-override is vulnerable to a regular expression denial of service vulnerability when specially crafted input is passed in to be parsed via the X-HTTP-Method-Override header. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/538
CVE ID: CVE-2017-16137 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-16T19:00:36.638Z Vendors: HackerOne Products: debug node module Problem Types: CWE-400 Description: The debug module is vulnerable to regular expression denial of service when untrusted user input is passed into the o formatter. It takes around 50k characters to block for 2 seconds making this a low severity issue. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/visionmedia/debug/pull/504 - https://github.com/visionmedia/debug/issues/501 - https://nodesecurity.io/advisories/534 - https://lists.apache.org/thread.html/r8ba4c628fba7181af58817d452119481adce4ba92e889c6
//nodesecurity.io/advisories/534 - https://lists.apache.org/thread.html/r8ba4c628fba7181af58817d452119481adce4ba92e889c643e4c7dd3%40%3Ccommits.netbeans.apache.org%3E - https://lists.apache.org/thread.html/rb5ac16fad337d1f3bb7079549f97d8166d0ef3082629417c39f12d63%40%3Cnotifications.netbeans.apache.org%3E
CVE ID: CVE-2017-16138 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-16T19:01:13.031Z Vendors: HackerOne Products: mime node module Problem Types: CWE-400 Description: The mime module < 1.4.1, 2.0.1, 2.0.2 is vulnerable to regular expression denial of service when a mime lookup is performed on untrusted user input. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/broofa/node-mime/issues/167 - https://nodesecurity.io/advisories/535
CVE ID: CVE-2017-16139 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-17T03:07:05.460Z Vendors: HackerOne Products: jikes node module Problem Types: CWE-22 Description: jikes is a file server. jikes is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. Accessible files are restricted to files with .htm and .js extensions. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/476 - https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/jikes
CVE ID: CVE-2017-16140 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-16T23:10:39.064Z Vendors: HackerOne Products: lab6.brit95 node module Problem Types: CWE-22 Description: lab6.brit95 is a file server. lab6.brit95 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/lab6.brit95 - https://nodesecurity.io/advisories/475
CVE ID: CVE-2017-16141 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-16T18:24:16.908Z Vendors: HackerOne Products: lab6drewfusbyu node module Problem Types: CWE-22 Description: lab6drewfusbyu is an http server. lab6drewfusbyu is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/474 - https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/lab6drewfusbyu
CVE ID: CVE-2017-16142 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-16T19:40:08.702Z Vendors: HackerOne Products: infraserver node module Problem Types: CWE-22 Description: infraserver is a RESTful server. infraserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/471 - https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/infraserver
CVE ID: CVE-2017-16143 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-16T18:13:46.115Z Vendors: HackerOne Products: commentapp.stetsonwood node module Problem Types: CWE-22 Description: commentapp.stetsonwood is an http server. commentapp.stetsonwood is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/commentapp.stetsonwood - https://nodesecurity.io/advisories/470
CVE ID: CVE-2017-16144 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-16T18:59:38.705Z Vendors: HackerOne Products: myserver.alexcthomas18 node module Problem Types: CWE-22 Description: myserver.alexcthomas18 is a file server. myserver.alexcthomas18 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/469 - https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/myserver.alexcthomas18
CVE ID: CVE-2017-16145 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-16T23:16:28.479Z Vendors: HackerOne Products: sspa node module Problem Types: CWE-22 Description: sspa is a server dedicated to single-page apps. sspa is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/463 - https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/sspa
CVE ID: CVE-2017-16146 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-16T20:17:51.868Z Vendors: HackerOne Products: mockserve node module Problem Types: CWE-22 Description: mockserve is a file server. mockserve is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/mockserve - https://nodesecurity.io/advisories/445
CVE ID: CVE-2017-16147 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-16T17:03:17.308Z Vendors: HackerOne Products: shit-server node module Problem Types: CWE-22 Description: shit-server is a file server. shit-server is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/shit-server - https://nodesecurity.io/advisories/430
CVE ID: CVE-2017-16148 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-17T00:31:50.337Z Vendors: HackerOne Products: serve46 node module Problem Types: CWE-22 Description: serve46 is a static file server. serve46 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/456 - https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/serve46
CVE ID: CVE-2017-16149 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-16T23:02:11.450Z Vendors: HackerOne Products: zwserver node module Problem Types: CWE-22 Description: zwserver is a weather web server. zwserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/372 - https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/zwserver
CVE ID: CVE-2017-16150 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-17T03:59:54.740Z Vendors: HackerOne Products: wangguojing123 node module Problem Types: CWE-22 Description: wanggoujing123 is a simple webserver. wanggoujing123 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/wangguojing123 - https://nodesecurity.io/advisories/374
CVE ID: CVE-2017-16151 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-16T16:54:03.710Z Vendors: HackerOne Products: electron node module Problem Types: CWE-94 Description: Based on details posted by the ElectronJS team; A remote code execution vulnerability has been discovered in Google Chromium that affects all recent versions of Electron. Any Electron app that accesses remote content is vulnerable to this exploit, regardless of whether the [sandbox option](https://electron.atom.io/docs/api/sandbox-option) is enabled. Additional Analyst Notes: - CVE Program Container: References: - https://electron.atom.io/blog/2017/09/27/chromium-rce-vulnerability-fix - https://node
Program Container: References: - https://electron.atom.io/blog/2017/09/27/chromium-rce-vulnerability-fix - https://nodesecurity.io/advisories/539
CVE ID: CVE-2017-16152 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-17T02:37:05.290Z Vendors: HackerOne Products: static-html-server node module Problem Types: CWE-22 Description: static-html-server is a static file server. static-html-server is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/static-html-server - https://nodesecurity.io/advisories/376
CVE ID: CVE-2017-16153 State: PUBLISHED Published: 2018-05-29T20:00:00Z Last Updated: 2024-09-16T20:31:49.099Z Vendors: HackerOne Products: gaoxuyan node module Problem Types: CWE-22 Description: gaoxuyan is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/378 - https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/gaoxuyan
CVE ID: CVE-2017-16154 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-16T17:17:58.169Z Vendors: HackerOne Products: earlybird node module Problem Types: CWE-22 Description: earlybird is a web server module for early development. earlybird is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/earlybird - https://nodesecurity.io/advisories/380
CVE ID: CVE-2017-16155 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-17T00:35:58.830Z Vendors: HackerOne Products: fast-http-cli node module Problem Types: CWE-22 Description: fast-http-cli is the command line interface for fast-http, a simple web server. fast-http-cli is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/fast-http-cli - https://nodesecurity.io/advisories/383
CVE ID: CVE-2017-16156 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-16T18:19:30.385Z Vendors: HackerOne Products: myprolyz node module Problem Types: CWE-22 Description: myprolyz is a static file server. myprolyz is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/386 - https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/myprolyz
CVE ID: CVE-2017-16157 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-16T22:20:42.922Z Vendors: HackerOne Products: censorify.tanisjr node module Problem Types: CWE-22 Description: censorify.tanisjr is a simple web server and API RESTful service. censorify.tanisjr is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/censorify.tanisjr - https://nodesecurity.io/advisories/392