deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-05
Description: A server-side request forgery vulnerability exists in Jenkins 2.120 and older, LTS 2.107.2 and older in ZipExtractionInstaller.java that allows users with Overall/Read permission to have Jenkins submit a HTTP GET request to an arbitrary URL and learn whether the response is successful (200) or not.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://jenkins.io/security/advisory/2018-05-09/#SECURITY-794; https://www.oracle.com/security-alerts/cpuapr2022.html; https://jenkins.io/security/advisory/2018-05-09/#SECURITY-794
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-05
Description: A exposure of sensitive information vulnerability exists in Jenkins Gitlab Hook Plugin 1.4.2 and older in gitlab_notifier.rb, views/gitlab_notifier/global.erb that allows attackers with local Jenkins master file system access or control of a Jenkins administrator's web browser (e.g. malicious extension) to retrieve the configured Gitlab token.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-200
References: https://jenkins.io/security/advisory/2018-05-09/#SECURITY-263; https://jenkins.io/security/advisory/2018-05-09/#SECURITY-263
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-05
Description: An improper authorization vulnerability exists in Jenkins Black Duck Hub Plugin 3.0.3 and older in PostBuildScanDescriptor.java that allows users with Overall/Read permission to read and write the Black Duck Hub plugin configuration.
CVSS Score: 8.1 (HIGH)
CWE: CWE-863
References: https://jenkins.io/security/advisory/2018-05-09/#SECURITY-670; https://jenkins.io/security/advisory/2018-05-09/#SECURITY-670
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-05
Description: A XML external entity processing vulnerability exists in Jenkins Black Duck Hub Plugin 3.1.0 and older in PostBuildScanDescriptor.java that allows attackers with Overall/Read permission to make Jenkins process XML eternal entities in an XML document.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-611
References: https://jenkins.io/security/advisory/2018-05-09/#SECURITY-671; https://jenkins.io/security/advisory/2018-05-09/#SECURITY-671
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-05
Description: A persisted cross-site scripting vulnerability exists in Jenkins Groovy Postbuild Plugin 2.3.1 and older in various Jelly files that allows attackers able to control build badge content to define JavaScript that would be executed in another user's browser when that other user performs some UI actions.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://jenkins.io/security/advisory/2018-05-09/#SECURITY-821; https://jenkins.io/security/advisory/2018-05-09/#SECURITY-821
CVE: CVE-2018-10057
Published: 2018-06-05
Description: The remote management interface of cgminer 4.10.0 and bfgminer 5.5.0 allows an authenticated remote attacker to write the miner configuration file to arbitrary locations on the server due to missing basedir restrictions (absolute directory traversal).
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-22
References: http://www.openwall.com/lists/oss-security/2018/06/03/1; https://github.com/tintinweb/pub/tree/master/pocs/cve-2018-10057; http://www.openwall.com/lists/oss-security/2018/06/03/1
CVE: CVE-2018-10058
Published: 2018-06-05
Description: The remote management interface of cgminer 4.10.0 and bfgminer 5.5.0 allows an authenticated remote attacker to execute arbitrary code due to a stack-based buffer overflow in the addpool, failover-only, poolquota, and save command handlers.
CVSS Score: 8.8 (HIGH)
CWE: CWE-787
References: http://www.openwall.com/lists/oss-security/2018/06/03/1; https://github.com/tintinweb/pub/tree/master/pocs/cve-2018-10058; http://www.openwall.com/lists/oss-security/2018/06/03/1
CVE: CVE-2018-11586
Published: 2018-06-05
Description: XML external entity (XXE) vulnerability in api/rest/status in SearchBlox 8.6.7 allows remote unauthenticated users to read arbitrary files or conduct server-side request forgery (SSRF) attacks via a crafted DTD in an XML request.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-611, CWE-918
References: http://packetstormsecurity.com/files/148032/SearchBlox-8.6.7-XML-External-Entity-Injection.html; https://gurelahmet.com/searchblox-8-6-7-out-of-band-xml-external-entity-oob-xxe-cve-2018-11586/; https://www.exploit-db.com/exploits/44827/
CVE: CVE-2018-3691
Published: 2018-06-05
Description: Some implementations in Intel Integrated Performance Primitives Cryptography Library before version 2018 U3.1 do not properly ensure constant execution time.
CVSS Score: 4.7 (MEDIUM)
References: https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00106.html; https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00106.html
CVE: CVE-2018-7884
Published: 2018-06-05
Description: An issue was discovered in DisplayLink Core Software Cleaner Application 8.2.1956. When the drivers are updated to a newer version, the product launches a process as SYSTEM to uninstall the old version: cl_1956.exe is run as SYSTEM on the %systemroot%\Temp folder, where any user can write a DLL (e.g., version.dll) to perform DLL Hijacking and elevate privileges to SYSTEM.
CVSS Score: 7.8 (HIGH)
CWE: CWE-426
References: http://seclists.org/fulldisclosure/2018/Jun/1; http://seclists.org/fulldisclosure/2018/Jun/1
CVE: CVE-2018-11553
Published: 2018-06-06
Description: SGIN.CN xiangyun platform V9.4.10 has XSS via the login_url parameter to /login.php.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/helloheary/SGIN.CN-V9.4.10-product-has-XSS-in-login-page/blob/master/README.md; https://github.com/helloheary/SGIN.CN-V9.4.10-product-has-XSS-in-login-page/blob/master/README.md
CVE: CVE-2018-11808
Published: 2018-06-06
Description: Incorrect Access Control in CustomFieldsFeedServlet in Zoho ManageEngine Applications Manager Version 13 before build 13740 allows an attacker to delete any file and read certain files on the server in the context of the user (which by default is "NT AUTHORITY / SYSTEM") by sending a specially crafted request to the server.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-20
References: http://www.securityfocus.com/bid/104467; https://github.com/kactrosN/publicdisclosures; https://www.manageengine.com/products/applications_manager/issues.html
CVE: CVE-2018-11813
Published: 2018-06-06
Description: libjpeg 9c has a large loop because read_pixel in rdtarga.c mishandles EOF.
CVSS Score: 7.5 (HIGH)
CWE: CWE-834
References: http://lists.opensuse.org/opensuse-security-announce/2019-04/msg00015.html; http://lists.opensuse.org/opensuse-security-announce/2019-05/msg00015.html; http://www.ijg.org/files/jpegsrc.v9d.tar.gz
CVE: CVE-2017-1474
Published: 2018-06-06
Description: IBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 discloses sensitive information to unauthorized users. The information can be used to mount further attacks on the system. IBM X-Force ID: 128606.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=swg22012329; http://www.securityfocus.com/bid/104476; https://exchange.xforce.ibmcloud.com/vulnerabilities/128606
CVE: CVE-2017-1476
Published: 2018-06-06
Description: IBM Security Access Manager Appliance 7.0.0, 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 could allow a remote attacker to obtain sensitive information, caused by the failure to properly enable HTTP Strict Transport Security. An attacker could exploit this vulnerability to obtain sensitive information using man in the middle techniques. IBM X-Force ID: 128610.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-200
References: http://www.ibm.com/support/docview.wss?uid=swg22012310; http://www.securityfocus.com/bid/104501; https://exchange.xforce.ibmcloud.com/vulnerabilities/128610
CVE: CVE-2017-1480
Published: 2018-06-06
Description: IBM Security Access Manager Appliance 8.0.0 through 8.0.1.6, and 9.0.0 through 9.0.3.1 stores potentially sensitive information in log files that could be read by a remote user. IBM X-Force ID: 128617.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-532
References: http://www.ibm.com/support/docview.wss?uid=swg22012309; http://www.securityfocus.com/bid/104471; https://exchange.xforce.ibmcloud.com/vulnerabilities/128617
CVE: CVE-2018-1456
Published: 2018-06-06
Description: IBM Rhapsody DM 5.0 through 5.0.2 and 6.0 through 6.0.5 is vulnerable to a XML External Entity Injection (XXE) attack when processing XML data. A remote attacker could exploit this vulnerability to expose sensitive information or consume memory resources. IBM X-Force ID: 140091.
CVSS Score: 7.1 (HIGH)
CWE: CWE-611
References: http://www.ibm.com/support/docview.wss?uid=swg22016795; https://exchange.xforce.ibmcloud.com/vulnerabilities/140091; http://www.ibm.com/support/docview.wss?uid=swg22016795
CVE: CVE-2[PII_REDACTED]
Published: 2018-06-06
Description: Soar Labs Soar Coin version up to and including git commit 4a2aa71ee21014e2880a3f7aad11091ed6ad434f (latest release as of Sept 2017) contains an intentional backdoor vulnerability in the function zero_fee_transaction() that can result in theft of Soar Coins by the "onlycentralAccount" (Soar Labs) after payment is processed.
CVSS Score: 7.5 (HIGH)
References: https://raw.githubusercontent.com/neowenyuan27/SoarCoin/master/wallet/soarcoinv2.sol; https://www.bankinfosecurity.com/exclusive-aussie-firm-loses-5m-to-backdoored-cryptocurrency-a-11057; https://raw.githubusercontent.com/neowenyuan27/SoarCoin/master/wallet/soarcoinv2.sol
CVE: CVE-2017-7906
Published: 2018-06-06
Description: In ABB IP GATEWAY 3.39 and prior, the web server does not sufficiently verify that a request was performed by the authenticated user, which may allow an attacker to launch a request impersonating that user.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352, CWE-352
References: http://www.securityfocus.com/bid/104388; https://ics-cert.us-cert.gov/advisories/ICSA-18-156-01; http://www.securityfocus.com/bid/104388
CVE: CVE-2017-7931
Published: 2018-06-06
Description: In ABB IP GATEWAY 3.39 and prior, by accessing a specific uniform resource locator (URL) on the web server, a malicious user is able to access the configuration files and application pages without authentication.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-287, CWE-287
References: http://www.securityfocus.com/bid/104388; https://ics-cert.us-cert.gov/advisories/ICSA-18-156-01; http://www.securityfocus.com/bid/104388
CVE: CVE-2017-7933
Published: 2018-06-06
Description: In ABB IP GATEWAY 3.39 and prior, some configuration files contain passwords stored in plain-text, which may allow an attacker to gain unauthorized access.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-522
References: http://www.securityfocus.com/bid/104388; https://ics-cert.us-cert.gov/advisories/ICSA-18-156-01; http://www.securityfocus.com/bid/104388
CVE: CVE-2018-10198
Published: 2018-06-06
Description: An issue was discovered in OTRS 6.0.x before 6.0.7. An attacker who is logged into OTRS as a customer can use the ticket overview screen to disclose internal article information of their customer tickets.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: https://community.otrs.com/security-advisory-2018-01-security-update-for-otrs-framework/; https://community.otrs.com/security-advisory-2018-01-security-update-for-otrs-framework/
CVE: CVE-2018-1265
Published: 2018-06-06
Description: Cloud Foundry Diego, release versions prior to 2.8.0, does not properly sanitize file paths in tar and zip files headers. A remote attacker with CF admin privileges can upload a malicious buildpack that will allow a complete takeover of a Diego Cell VM and access to all apps running on that Diego Cell.
CVSS Score: 7.2 (HIGH)
CWE: CWE-434
References: https://www.cloudfoundry.org/blog/cve-2018-1265/; https://www.cloudfoundry.org/blog/cve-2018-1265/
CVE: CVE-2018-1268
Published: 2018-06-06
Description: Cloud Foundry Loggregator, versions 89.x prior to 89.5 or 96.x prior to 96.1 or 99.x prior to 99.1 or 101.x prior to 101.9 or 102.x prior to 102.2, does not validate app GUID structure in requests. A remote authenticated malicious user knowing the GUID of an app may construct malicious requests to read from or write to the logs of that app.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-20
References: https://www.cloudfoundry.org/blog/cve-2018-1268; https://www.cloudfoundry.org/blog/cve-2018-1268
CVE: CVE-2018-1269
Published: 2018-06-06
Description: Cloud Foundry Loggregator, versions 89.x prior to 89.5 or 96.x prior to 96.1 or 99.x prior to 99.1 or 101.x prior to 101.9 or 102.x prior to 102.2, does not handle errors thrown while constructing certain http requests. A remote authenticated user may construct malicious requests to cause the traffic controller to leave dangling TCP connections, which could cause denial of service.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-755
References: https://www.cloudfoundry.org/blog/cve-2018-1269; https://www.cloudfoundry.org/blog/cve-2018-1269
CVE: CVE-2018-7510
Published: 2018-06-06
Description: In the web application in BeaconMedaes TotalAlert Scroll Medical Air Systems running software versions prior to[PII_REDACTED].23, passwords are presented in plaintext in a file that is accessible without authentication.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-256, CWE-522
References: https://ics-cert.us-cert.gov/advisories/ICSMA-18-144-01; https://ics-cert.us-cert.gov/advisories/ICSMA-18-144-01
CVE: CVE-2017-18154
Published: 2018-06-06
Description: A crafted binder request can cause an arbitrary unmap in MediaServer in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2; https://source.android.com/security/bulletin/2018-05-01; https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2
CVE: CVE-2018-3562
Published: 2018-06-06
Description: Buffer over -read can occur while processing a FILS authentication frame in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-119
References: https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2; https://source.android.com/security/bulletin/2018-05-01; https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2
CVE: CVE-2018-3565
Published: 2018-06-06
Description: While sending a probe request indication in lim_send_sme_probe_req_ind() in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel, a buffer overflow can occur.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2; https://source.android.com/security/bulletin/2018-05-01; https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2
CVE: CVE-2018-3578
Published: 2018-06-06
Description: Type mismatch for ie_len can cause the WLAN driver to allocate less memory on the heap due to implicit casting leading to a heap buffer overflow in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119
References: https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2; https://source.android.com/security/bulletin/2018-05-01; https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2
CVE: CVE-2018-3580
Published: 2018-06-06
Description: Stack-based buffer overflow can occur In the WLAN driver if the pmkid_count value is larger than the PMKIDCache size in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2; https://source.android.com/security/bulletin/2018-05-01; https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2
CVE: CVE-2018-3852
Published: 2018-06-06
Description: An exploitable denial of service vulnerability exists in the Ocularis Recorder functionality of Ocularis 5.5.0.242. A specially crafted TCP packet can cause a process to terminate resulting in denial of service. An attacker can send a crafted TCP packet to trigger this vulnerability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: http://www.securityfocus.com/bid/104387; https://talosintelligence.com/vulnerability_reports/TALOS-2018-0535; http://www.securityfocus.com/bid/104387
CVE: CVE-2018-5840
Published: 2018-06-06
Description: Buffer Copy without Checking Size of Input can occur during the DRM SDE driver initialization sequence in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.
CVSS Score: 7.8 (HIGH)
CWE: CWE-120
References: https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2; https://source.android.com/security/bulletin/2018-05-01; https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2
CVE: CVE-2018-5841
Published: 2018-06-06
Description: dcc_curr_list is initialized with a default invalid value that is expected to be programmed by the user through a sysfs node which could lead to an invalid access in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.
CVSS Score: 7.8 (HIGH)
CWE: CWE-1188
References: https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2; https://source.android.com/security/bulletin/2018-05-01; https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2
CVE: CVE-2018-5845
Published: 2018-06-06
Description: A race condition in drm_atomic_nonblocking_commit() in the display driver can potentially lead to a Use After Free scenario in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.
CVSS Score: 7.0 (HIGH)
CWE: CWE-362, CWE-416
References: https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2; https://source.android.com/security/bulletin/2018-05-01; https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2
CVE: CVE-2018-5846
Published: 2018-06-06
Description: A Use After Free condition can occur in the IPA driver whenever the IPA IOCTLs IPA_IOC_NOTIFY_WAN_UPSTREAM_ROUTE_ADD/IPA_IOC_NOTIFY_WAN_UPSTREAM_ROUTE_DEL/IPA_IOC_NOTIFY_WAN_EMBMS_CONNECTED are called in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2; https://source.android.com/security/bulletin/2018-05-01; https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2
CVE: CVE-2018-5850
Published: 2018-06-06
Description: In the function csr_update_fils_params_rso(), insufficient validation on a key length can result in an integer underflow leading to a buffer overflow in all Android releases from CAF (Android for MSM, Firefox OS for MSM, QRD Android) using the Linux Kernel.
CVSS Score: 7.8 (HIGH)
CWE: CWE-191
References: https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2; https://source.android.com/security/bulletin/2018-05-01; https://www.codeaurora.org/security-bulletin/2018/05/11/may-2018-code-aurora-security-bulletin-2
CVE: CVE-2017-16056
Published: 2018-06-07
Description: mssql.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVSS Score: 7.5 (HIGH)
CWE: CWE-506, CWE-200
References: https://nodesecurity.io/advisories/485; https://nodesecurity.io/advisories/485
CVE: CVE-2017-16057
Published: 2018-06-07
Description: nodemssql was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVSS Score: 7.5 (HIGH)
CWE: CWE-506, CWE-200
References: https://nodesecurity.io/advisories/484; https://nodesecurity.io/advisories/484
CVE: CVE-2017-16058
Published: 2018-06-07
Description: gruntcli was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVSS Score: 7.5 (HIGH)
CWE: CWE-506, CWE-200
References: https://nodesecurity.io/advisories/498; https://nodesecurity.io/advisories/498
CVE: CVE-2017-16059
Published: 2018-06-07
Description: mssql-node was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVSS Score: 7.5 (HIGH)
CWE: CWE-506, CWE-200
References: https://nodesecurity.io/advisories/480; https://nodesecurity.io/advisories/480
CVE: CVE-2017-16060
Published: 2018-06-07
Description: babelcli was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVSS Score: 7.5 (HIGH)
CWE: CWE-506, CWE-200
References: https://nodesecurity.io/advisories/499; https://nodesecurity.io/advisories/499
CVE: CVE-2017-16063
Published: 2018-06-07
Description: node-opensl was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVSS Score: 7.5 (HIGH)
CWE: CWE-506, CWE-200
References: https://nodesecurity.io/advisories/502; https://nodesecurity.io/advisories/502
CVE: CVE-2017-16064
Published: 2018-06-07
Description: node-openssl was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVSS Score: 7.5 (HIGH)
CWE: CWE-506, CWE-200
References: https://nodesecurity.io/advisories/503; https://nodesecurity.io/advisories/503
CVE: CVE-2017-16065
Published: 2018-06-07
Description: openssl.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVSS Score: 7.5 (HIGH)
CWE: CWE-506, CWE-200
References: https://nodesecurity.io/advisories/504; https://nodesecurity.io/advisories/504
CVE: CVE-2017-16066
Published: 2018-06-07
Description: opencv.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVSS Score: 7.5 (HIGH)
CWE: CWE-506, CWE-200
References: https://nodesecurity.io/advisories/505; https://nodesecurity.io/advisories/505
CVE: CVE-2017-16067
Published: 2018-06-07
Description: node-opencv was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVSS Score: 7.5 (HIGH)
CWE: CWE-506, CWE-200
References: https://nodesecurity.io/advisories/506; https://nodesecurity.io/advisories/506
CVE: CVE-2017-16068
Published: 2018-06-07
Description: ffmepg was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVSS Score: 7.5 (HIGH)
CWE: CWE-506, CWE-200
References: https://nodesecurity.io/advisories/507; https://nodesecurity.io/advisories/507
CVE: CVE-2017-16069
Published: 2018-06-07
Description: nodeffmpeg was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVSS Score: 7.5 (HIGH)
CWE: CWE-506, CWE-200
References: https://nodesecurity.io/advisories/508; https://nodesecurity.io/advisories/508
CVE: CVE-2017-16070
Published: 2018-06-07
Description: nodecaffe was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVSS Score: 7.5 (HIGH)
CWE: CWE-506, CWE-200
References: https://nodesecurity.io/advisories/509; https://nodesecurity.io/advisories/509
CVE: CVE-2017-16071
Published: 2018-06-07
Description: nodemailer-js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVSS Score: 7.5 (HIGH)
CWE: CWE-506, CWE-200
References: https://nodesecurity.io/advisories/510; https://nodesecurity.io/advisories/510