Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2017-16072 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-16T17:48:12.721Z Vendors: HackerOne Products: nodemailer.js node module Problem Types: CWE-506 Description: nodemailer.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/511
CVE ID: CVE-2017-16073 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-16T18:23:43.644Z Vendors: HackerOne Products: noderequest node module Problem Types: CWE-506 Description: noderequest was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/512
CVE ID: CVE-2017-16074 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-17T01:42:04.209Z Vendors: HackerOne Products: crossenv node module Problem Types: CWE-506 Description: crossenv was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/513
CVE ID: CVE-2017-16075 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-16T20:51:39.905Z Vendors: HackerOne Products: http-proxy.js node module Problem Types: CWE-506 Description: http-proxy.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/514
CVE ID: CVE-2017-16076 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-17T00:06:15.829Z Vendors: HackerOne Products: proxy.js node module Problem Types: CWE-506 Description: proxy.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/515
CVE ID: CVE-2017-16077 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-17T03:53:10.528Z Vendors: HackerOne Products: mongose node module Problem Types: CWE-506 Description: mongose was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/516
CVE ID: CVE-2017-16078 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-16T19:09:09.108Z Vendors: HackerOne Products: shadowsock node module Problem Types: CWE-506 Description: shadowsock was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/517
CVE ID: CVE-2017-16079 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-16T17:15:27.449Z Vendors: HackerOne Products: smb node module Problem Types: CWE-506 Description: smb was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/518
CVE ID: CVE-2017-16080 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-16T17:59:03.922Z Vendors: HackerOne Products: nodesass node module Problem Types: CWE-506 Description: nodesass was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/519
CVE ID: CVE-2017-16081 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-16T16:33:41.611Z Vendors: HackerOne Products: cross-env.js node module Problem Types: CWE-506 Description: cross-env.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/520
CVE ID: CVE-2017-16082 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-17T03:49:23.543Z Vendors: HackerOne Products: pg node module Problem Types: CWE-94 Description: A remote code execution vulnerability was found within the pg module when the remote database or query specifies a specially crafted column name. There are 2 likely scenarios in which one would likely be vulnerable. 1) Executing unsafe, user-supplied sql which contains a malicious column name. 2) Connecting to an untrusted database and executing a query which returns results where any of the column names are malicious. Additional Analyst Notes: - CVE Program Container: References: - https://node-postgres.
the column names are malicious. Additional Analyst Notes: - CVE Program Container: References: - https://node-postgres.com/announcements#2017-08-12-code-execution-vulnerability - https://nodesecurity.io/advisories/521
CVE ID: CVE-2017-16083 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-16T18:13:51.663Z Vendors: HackerOne Products: node-simple-router node module Problem Types: CWE-22 Description: node-simple-router is a minimalistic router for Node. node-simple-router is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/352 - https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/node-simple-router
CVE ID: CVE-2017-16084 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-16T17:33:15.728Z Vendors: HackerOne Products: list-n-stream node module Problem Types: CWE-22 Description: list-n-stream is a server for static files to list and stream local videos. list-n-stream v0.0.10 or lower is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/list-n-stream - https://nodesecurity.io/advisories/344
CVE ID: CVE-2017-16085 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-16T19:46:49.324Z Vendors: HackerOne Products: tinyserver2 node module Problem Types: CWE-22 Description: tinyserver2 is a webserver for static files. tinyserver2 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/tinyserver2 - https://nodesecurity.io/advisories/371
CVE ID: CVE-2017-16086 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-17T00:31:35.528Z Vendors: HackerOne Products: ua-parser node module Problem Types: CWE-400 Description: ua-parser is a port of Browserscope's user agent parser. ua-parser is vulnerable to a ReDoS (Regular Expression Denial of Service) attack when given a specially crafted UserAgent header. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/316
CVE ID: CVE-2017-16088 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-16T16:13:38.445Z Vendors: HackerOne Products: safe-eval node module Problem Types: CWE-610 Description: The safe-eval module describes itself as a safer version of eval. By accessing the object constructors, un-sanitized user input can access the entire standard library and effectively break out of the sandbox. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/patriksimek/vm2/issues/59 - https://github.com/hacksparrow/safe-eval/issues/5 - https://nodesecurity.io/advisories/337
CVE ID: CVE-2017-16089 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-16T17:02:39.089Z Vendors: HackerOne Products: serverlyr node module Problem Types: CWE-22 Description: serverlyr is a simple http server. serverlyr is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/365 - https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/serverlyr
CVE ID: CVE-2017-16090 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-16T20:42:07.064Z Vendors: HackerOne Products: fsk-server node module Problem Types: CWE-22 Description: fsk-server is a simple http server. fsk-server is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/fsk-server - https://nodesecurity.io/advisories/345
CVE ID: CVE-2017-16091 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-16T21:02:25.201Z Vendors: HackerOne Products: xtalk node module Problem Types: CWE-22 Description: xtalk helps your browser talk to nodex, a simple web framework. xtalk is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/339
CVE ID: CVE-2017-16092 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-16T17:29:05.227Z Vendors: HackerOne Products: sencisho node module Problem Types: CWE-22 Description: Sencisho is a simple http server for local development. Sencisho is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/340 - https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/sencisho
CVE ID: CVE-2017-16093 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-17T03:18:53.585Z Vendors: HackerOne Products: cyber-js node module Problem Types: CWE-22 Description: cyber-js is a simple http server. A cyberjs server is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/cyber-js - https://nodesecurity.io/advisories/347
CVE ID: CVE-2017-16094 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-16T18:49:13.137Z Vendors: HackerOne Products: iter-http node module Problem Types: CWE-22 Description: iter-http is a server for static files. iter-http is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/343 - https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/iter-http
CVE ID: CVE-2017-16095 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-17T01:21:46.761Z Vendors: HackerOne Products: serverliujiayi1 node module Problem Types: CWE-22 Description: serverliujiayi1 is a simple http server. serverliujiayi1 is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/serverliujiayi1 - https://nodesecurity.io/advisories/367
CVE ID: CVE-2017-16096 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-17T03:19:00.448Z Vendors: HackerOne Products: serveryaozeyan node module Problem Types: CWE-22 Description: serveryaozeyan is a simple HTTP server. serveryaozeyan is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/355 - https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/serveryaozeyan
CVE ID: CVE-2017-16097 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-17T00:30:39.731Z Vendors: HackerOne Products: tiny-http node module Problem Types: CWE-22 Description: tiny-http is a simple http server. tiny-http is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/342 - https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/tiny-http
CVE ID: CVE-2017-16098 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-16T18:03:05.636Z Vendors: HackerOne Products: charset node module Problem Types: CWE-400 Description: charset 1.0.0 and below are vulnerable to regular expression denial of service. Input of around 50k characters is required for a slow down of around 2 seconds. Unless node was compiled using the -DHTTP_MAX_HEADER_SIZE= option the default header max length is 80kb, so the impact of the ReDoS is relatively low. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/524 - https://github.com/node-modules/charset/issues/10
CVE ID: CVE-2017-16099 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-17T00:56:56.438Z Vendors: HackerOne Products: no-case node module Problem Types: CWE-400 Description: The no-case module is vulnerable to regular expression denial of service. When malicious untrusted user input is passed into no-case it can block the event loop causing a denial of service condition. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/blakeembrey/no-case/issues/17 - https://nodesecurity.io/advisories/529
CVE ID: CVE-2017-16100 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-17T02:16:17.609Z Vendors: HackerOne Products: dns-sync node module Problem Types: CWE-94 Description: dns-sync is a sync/blocking dns resolver. If untrusted user input is allowed into the resolve() method then command injection is possible. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/skoranga/node-dns-sync/issues/5 - https://nodesecurity.io/advisories/523
CVE ID: CVE-2017-16101 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-17T01:41:09.946Z Vendors: HackerOne Products: serverwg node module Problem Types: CWE-22 Description: serverwg is a simple http server. serverwg is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/serverwg - https://nodesecurity.io/advisories/364
CVE ID: CVE-2017-16102 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-16T23:36:51.454Z Vendors: HackerOne Products: serverhuwenhui node module Problem Types: CWE-22 Description: serverhuwenhui is a simple http server. serverhuwenhui is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/366 - https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/serverhuwenhui
CVE ID: CVE-2017-16103 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-17T01:11:53.088Z Vendors: HackerOne Products: serveryztyzt node module Problem Types: CWE-22 Description: serveryztyzt is a simple http server. serveryztyzt is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/354 - https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/serveryztyzt
CVE ID: CVE-2017-16104 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-17T02:32:16.994Z Vendors: HackerOne Products: citypredict.whauwiller node module Problem Types: CWE-22 Description: citypredict.whauwiller is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/370 - https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/citypredict.whauwiller
CVE ID: CVE-2017-16105 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-16T19:24:33.590Z Vendors: HackerOne Products: serverwzl node module Problem Types: CWE-22 Description: serverwzl is a simple http server. serverwzl is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the URL. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/serverwzl - https://nodesecurity.io/advisories/363
CVE ID: CVE-2017-16106 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-16T23:32:01.121Z Vendors: HackerOne Products: tmock node module Problem Types: CWE-22 Description: tmock is a static file server. tmock is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/375 - https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/tmock
CVE ID: CVE-2017-16107 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-16T18:13:41.674Z Vendors: HackerOne Products: pooledwebsocket node module Problem Types: CWE-22 Description: pooledwebsocket is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/341 - https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/pooledwebsocket
CVE ID: CVE-2017-16108 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-16T18:08:21.402Z Vendors: HackerOne Products: gaoxiaotingtingting node module Problem Types: CWE-22 Description: gaoxiaotingtingting is an HTTP server. gaoxiaotingtingting is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/static-html-server - https://nodesecurity.io/advisories/377
CVE ID: CVE-2017-16109 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-17T02:20:42.989Z Vendors: HackerOne Products: easyquick node module Problem Types: CWE-22 Description: easyquick is a simple web server. easyquick is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. Access is constrained, however, to supported file types. Requesting a file such as /etc/passwd returns a "not supported" error. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/JacksonGL/NPM-Vuln-PoC/tree/master/directory-traversal/easyquick - https://nodesecurity.io/advisories/373
CVE ID: CVE-2017-16110 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-17T02:27:30.487Z Vendors: HackerOne Products: weather.swlyons node module Problem Types: CWE-22 Description: weather.swlyons is a simple web server for weather updates. weather.swlyons is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/379 - https://github.com/JacksonGL/NPM-Vuln-PoC/blob/master/directory-traversal/weather.swlyons
CVE ID: CVE-2017-16111 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-16T20:37:31.202Z Vendors: HackerOne Products: content node module Problem Types: CWE-400 Description: The content module is a module to parse HTTP Content-* headers. It is used by the hapijs framework to provide this functionality. The module is vulnerable to regular expression denial of service when passed a specifically crafted Content-Type or Content-Disposition header. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/530
CVE ID: CVE-2017-16112 State: REJECTED Published: 2020-01-27T12:58:34 Last Updated: 2020-01-27T12:58:34 Description: No description available.
CVE ID: CVE-2017-16113 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-16T20:46:50.284Z Vendors: HackerOne Products: parsejson node module Problem Types: CWE-400 Description: The parsejson module is vulnerable to regular expression denial of service when untrusted user input is passed into it to be parsed. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/528 - https://github.com/get/parsejson/issues/4
CVE ID: CVE-2017-16114 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-17T03:44:01.567Z Vendors: HackerOne Products: marked node module Problem Types: CWE-400 Description: The marked module is vulnerable to a regular expression denial of service. Based on the information published in the public issue, 1k characters can block for around 6 seconds. Additional Analyst Notes: - CVE Program Container: References: - https://nodesecurity.io/advisories/531 - https://github.com/chjj/marked/issues/937
CVE ID: CVE-2017-16115 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-17T01:12:20.165Z Vendors: HackerOne Products: timespan node module Problem Types: CWE-400 Description: The timespan module is vulnerable to regular expression denial of service. Given 50k characters of untrusted user input it will block the event loop for around 10 seconds. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/indexzero/TimeSpan.js/issues/10 - https://nodesecurity.io/advisories/533
CVE ID: CVE-2017-16116 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-16T19:35:06.187Z Vendors: HackerOne Products: string node module Problem Types: CWE-400 Description: The string module is a module that provides extra string operations. The string module is vulnerable to regular expression denial of service when specifically crafted untrusted user input is passed into the underscore or unescapeHTML methods. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/jprichardson/string.js/issues/212 - https://nodesecurity.io/advisories/536
CVE ID: CVE-2017-16117 State: PUBLISHED Published: 2018-06-07T02:00:00Z Last Updated: 2024-09-17T01:16:46.857Z Vendors: HackerOne Products: slug node module Problem Types: CWE-400 Description: slug is a module to slugify strings, even if they contain unicode. slug is vulnerable to regular expression denial of service is specially crafted untrusted input is passed as input. About 50k characters can block the event loop for 2 seconds. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/dodo/node-slug/issues/82 - https://nodesecurity.io/advisories/537