| CVE-2022-32223 |
Node.js is vulnerable to Hijack Execution Flow: DLL Hijacking under certain conditions on Windows platforms.This…
|
Not rated
|
Jul 14, 2022 |
| CVE-2022-32222 |
A cryptographic vulnerability exists on Node.js on linux in versions of 18.x prior to 18.40.0 which allowed a default…
|
Not rated
|
Jul 14, 2022 |
| CVE-2022-32213 |
The llhttp…
|
Not rated
|
Jul 14, 2022 |
| CVE-2022-32212 |
A OS Command Injection vulnerability exists in Node.js…
|
Not rated
|
Jul 14, 2022 |
| CVE-2022-32215 |
The llhttp…
|
Not rated
|
Jul 14, 2022 |
| CVE-2022-32214 |
The llhttp…
|
Not rated
|
Jul 14, 2022 |
| CVE-2021-44533 |
Node.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 did not handle multi-value Relative Distinguished Names correctly
|
Not rated
|
Feb 24, 2022 |
| CVE-2021-44532 |
Node.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 converts SANs (Subject Alternative Names) to a string format
|
Not rated
|
Feb 24, 2022 |
| CVE-2021-44531 |
Accepting arbitrary Subject Alternative Name (SAN) types, unless a PKI is specifically defined to use a particular SAN…
|
Not rated
|
Feb 24, 2022 |
| CVE-2022-21824 |
Due to the formatting logic of the "console.table()" function it was not safe to allow user controlled input to be…
|
Not rated
|
Feb 24, 2022 |
| CVE-2021-22959 |
The parser in accepts requests with a space (SP) right after the header name before the colon
|
Not rated
|
Nov 15, 2021 |
| CVE-2021-22960 |
The parse function in llhttp < 2.1.4 and < 6.0.6
|
Not rated
|
Nov 3, 2021 |
| CVE-2021-22930 |
Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to a use after free attack where an attacker might be able…
|
Not rated
|
Oct 7, 2021 |
| CVE-2021-22940 |
Node.js before 16.6.1, 14.17.5, and 12.22.5 is vulnerable to a use after free attack where an attacker might be able…
|
Not rated
|
Aug 16, 2021 |
| CVE-2021-22939 |
If the Node.js https API was used incorrectly and "undefined" was in passed for the "rejectUnauthorized" parameter, no…
|
Not rated
|
Aug 16, 2021 |
| CVE-2021-22931 |
Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to Remote Code Execution, XSS, Application crashes due to…
|
Not rated
|
Aug 16, 2021 |
| CVE-2021-22921 |
Node.js before 16.4.1, 14.17.2, and 12.22.2 is vulnerable to local privilege escalation attacks under certain conditions…
|
Not rated
|
Jul 12, 2021 |
| CVE-2021-22918 |
Node.js before 16.4.1, 14.17.2, 12.22.2 is vulnerable to an out-of-bounds read when uv__idna_toascii() is used to…
|
Not rated
|
Jul 12, 2021 |
| CVE-2021-22883 |
Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to a denial of service attack when too many…
|
Not rated
|
Mar 3, 2021 |
| CVE-2021-22884 |
Node.js before 10.24.0, 12.21.0, 14.16.0, and 15.10.0 is vulnerable to DNS rebinding attacks as the whitelist includes…
|
Not rated
|
Mar 3, 2021 |
| CVE-2020-8265 |
Node.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 are vulnerable to a use-after-free bug in its TLS…
|
Not rated
|
Jan 6, 2021 |
| CVE-2020-8287 |
Node.js versions before 10.23.1, 12.20.1, 14.15.4, 15.5.1 allow two copies of a header field in an HTTP request (for…
|
Not rated
|
Jan 6, 2021 |
| CVE-2020-8277 |
A Node.js application that allows an attacker to trigger a DNS request for a host of their choice could trigger a Denial…
|
Not rated
|
Nov 19, 2020 |
| CVE-2020-8201 |
Node.js < 12.18.4 and < 14.11 can be exploited to perform HTTP desync attacks and deliver malicious payloads to…
|
Not rated
|
Sep 18, 2020 |
| CVE-2020-8252 |
The implementation of realpath in libuv < 10.22.1, < 12.18.4, and < 14.9.0 used within Node.js incorrectly determined…
|
Not rated
|
Sep 18, 2020 |