This CPE summary could be partial or incomplete. Please contact us for a detailed listing.
Summary
| Summuary | |
|---|---|
| CPE Name | cpe:/a:nodejs:node.js |
| Detail | |||
|---|---|---|---|
| Vendor | Nodejs | First view | 2014-10-18 |
| Product | Node.Js | Last view | 2019-03-28 |
| Version | Type | Application | |
| Edition | |||
| Language | |||
| Update | |||
Activity : Overall
COMMON PLATFORM ENUMERATION : Repartition per Version
| CPE Name | Affected CVE |
|---|---|
| cpe:/a:nodejs:node.js:0.10.18 | 23 |
| cpe:/a:nodejs:node.js:0.10.16-isaacs-manual | 23 |
| cpe:/a:nodejs:node.js:0.10.2 | 23 |
| cpe:/a:nodejs:node.js:0.10.12 | 23 |
| cpe:/a:nodejs:node.js:0.10.7 | 23 |
Related : CVE
This CPE Product have more than 25 Relations. If you want to see a complete summary for this CPE, please contact us.
| Date | Alert | Access Vector | Access Complexity | Authentication | ||
|---|---|---|---|---|---|---|
| 5 | 2019-03-28 | CVE-2019-5739 | Network | Low | None Requ... | |
| 5 | 2019-03-28 | CVE-2019-5737 | Network | Low | None Requ... | |
| 4.3 | 2018-11-28 | CVE-2018-12123 | Network | Medium | None Requ... | |
| 5 | 2018-11-28 | CVE-2018-12122 | Network | Low | None Requ... | |
| 5 | 2018-11-28 | CVE-2018-12121 | Network | Low | None Requ... | |
| Date | Alert | Access Vector | Access Complexity | Authentication | ||
|---|---|---|---|---|---|---|
| 6.8 | 2018-11-28 | CVE-2018-12120 | Network | Medium | None Requ... | |
| 5 | 2018-11-28 | CVE-2018-12116 | Network | Low | None Requ... | |
| 1.9 | 2018-11-15 | CVE-2018-5407 | Local | Medium | None Requ... | |
| 4.3 | 2018-10-30 | CVE-2018-0734 | Network | Medium | None Requ... | |
| 4.3 | 2018-10-29 | CVE-2018-0735 | Network | Medium | None Requ... | |
| 5 | 2018-08-21 | CVE-2018-7166 | Network | Low | None Requ... | |
| 5 | 2018-08-21 | CVE-2018-12115 | Network | Low | None Requ... | |
| 5 | 2018-06-13 | CVE-2018-7167 | Network | Low | None Requ... | |
| 5 | 2018-06-13 | CVE-2018-7164 | Network | Low | None Requ... | |
| 7.8 | 2018-06-13 | CVE-2018-7162 | Network | Low | None Requ... | |
| 7.8 | 2018-06-13 | CVE-2018-7161 | Network | Low | None Requ... | |
| 4 | 2018-06-04 | CVE-2017-16024 | Network | Low | Requires ... | |
| 6.8 | 2018-05-17 | CVE-2018-7160 | Network | Medium | None Requ... | |
| 5 | 2018-05-17 | CVE-2018-7159 | Network | Low | None Requ... | |
| 5 | 2018-05-17 | CVE-2018-7158 | Network | Low | None Requ... | |
| 5 | 2018-05-08 | CVE-2018-1000168 | Network | Low | None Requ... | |
| 4.3 | 2017-12-11 | CVE-2017-15897 | Network | Medium | None Requ... | |
| 6.4 | 2017-12-11 | CVE-2017-15896 | Network | Low | None Requ... | |
| 5 | 2017-10-30 | CVE-2017-14919 | Network | Low | None Requ... |
CWE : Common Weakness Enumeration
| % | id | Name |
|---|---|---|
| 19% (10) | CWE-20 | Improper Input Validation |
| 11% (6) | CWE-400 | Uncontrolled Resource Consumption ('Resource Exhaustion') |
| 11% (6) | CWE-399 | Resource Management Errors |
| 11% (6) | CWE-79 | Failure to Preserve Web Page Structure ('Cross-site Scripting') |
| 9% (5) | CWE-200 | Information Exposure |
| % | id | Name |
|---|---|---|
| 5% (3) | CWE-119 | Failure to Constrain Operations within the Bounds of a Memory Buffer |
| 3% (2) | CWE-787 | Out-of-bounds Write |
| 3% (2) | CWE-320 | Key Management Errors |
| 3% (2) | CWE-254 | Security Features |
| 1% (1) | CWE-476 | NULL Pointer Dereference |
| 1% (1) | CWE-444 | Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggli... |
| 1% (1) | CWE-388 | Error Handling |
| 1% (1) | CWE-284 | Access Control (Authorization) Issues |
| 1% (1) | CWE-125 | Out-of-bounds Read |
| 1% (1) | CWE-113 | Failure to Sanitize CRLF Sequences in HTTP Headers ('HTTP Response ... |
| 1% (1) | CWE-59 | Improper Link Resolution Before File Access ('Link Following') |
| 1% (1) | CWE-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path ... |
| 1% (1) | CWE-19 | Data Handling |
| 1% (1) | CWE-17 | Code |
Snort® IPS/IDS
| Date | Description |
|---|---|
| 2018-05-31 | Node.js zlib createDeflateRaw denial of service attempt RuleID : 46454 - Type : SERVER-WEBAPP - Revision : 2 |
| 2016-11-08 | OpenSSL OCSP Status Request Extension denial of service attempt RuleID : 40360 - Type : SERVER-OTHER - Revision : 3 |
| 2017-05-25 | Websocket upgrade request without a client key detected RuleID : 37028 - Type : PROTOCOL-OTHER - Revision : 2 |
Nessus® Vulnerability Scanner
This CPE Product have more than 25 Relations. If you want to see a complete summary for this CPE, please contact us.
| id | Description |
|---|---|
| 2019-01-18 | Name : The remote Fedora host is missing a security update. File : fedora_2019-a8ffcff7ee.nasl - Type : ACT_GATHER_INFO |
| 2019-01-17 | Name : The remote database server is affected by multiple vulnerabilities. File : mysql_5_6_43.nasl - Type : ACT_GATHER_INFO |
| 2019-01-17 | Name : The remote database server is affected by multiple vulnerabilities. File : mysql_5_7_25.nasl - Type : ACT_GATHER_INFO |
| 2019-01-17 | Name : The remote database server is affected by multiple vulnerabilities. File : mysql_8_0_14.nasl - Type : ACT_GATHER_INFO |
| 2019-01-03 | Name : The remote Fedora host is missing a security update. File : fedora_2018-f59d961d7b.nasl - Type : ACT_GATHER_INFO |
| id | Description |
|---|---|
| 2019-01-03 | Name : The remote Fedora host is missing a security update. File : fedora_2018-bdefa5e5bb.nasl - Type : ACT_GATHER_INFO |
| 2019-01-03 | Name : The remote Fedora host is missing a security update. File : fedora_2018-8049b2c488.nasl - Type : ACT_GATHER_INFO |
| 2019-01-02 | Name : Tenable Nessus running on the remote host is affected by multiple vulnerabili... File : nessus_tns_2018_16.nasl - Type : ACT_GATHER_INFO |
| 2019-01-02 | Name : Tenable Nessus running on the remote host is affected by multiple vulnerabili... File : nessus_tns_2018_17.nasl - Type : ACT_GATHER_INFO |
| 2018-12-28 | Name : The remote EulerOS host is missing a security update. File : EulerOS_SA-2018-1434.nasl - Type : ACT_GATHER_INFO |
| 2018-12-28 | Name : Node.js - JavaScript run-time environment is affected by multiple vulnerabili... File : nodejs_2018_nov.nasl - Type : ACT_GATHER_INFO |
| 2018-12-20 | Name : The remote Debian host is missing a security-related update. File : debian_DSA-4355.nasl - Type : ACT_GATHER_INFO |
| 2018-12-10 | Name : The remote FreeBSD host is missing one or more security-related updates. File : freebsd_pkg_2a86f45afc3c11e8a41400155d006b02.nasl - Type : ACT_GATHER_INFO |
| 2018-12-01 | Name : The remote Debian host is missing a security-related update. File : debian_DSA-4348.nasl - Type : ACT_GATHER_INFO |
| 2018-11-23 | Name : The remote Slackware host is missing a security update. File : Slackware_SSA_2018-325-01.nasl - Type : ACT_GATHER_INFO |
| 2018-11-23 | Name : The remote Debian host is missing a security update. File : debian_DLA-1586.nasl - Type : ACT_GATHER_INFO |
| 2018-11-14 | Name : Node.js - JavaScript run-time environment is affected by multiple vulnerabili... File : nodejs_2018_aug.nasl - Type : ACT_GATHER_INFO |
| 2018-11-14 | Name : Node.js - JavaScript run-time environment is affected by multiple vulnerabili... File : nodejs_2018_jul.nasl - Type : ACT_GATHER_INFO |
| 2018-11-14 | Name : Node.js - JavaScript run-time environment is affected by multiple vulnerabili... File : nodejs_2018_mar.nasl - Type : ACT_GATHER_INFO |
| 2018-11-13 | Name : The remote FreeBSD host is missing a security-related update. File : freebsd_pkg_6f170cf2e6b711e8a9a8b499baebfeaf.nasl - Type : ACT_GATHER_INFO |
| 2018-10-30 | Name : The remote FreeBSD host is missing one or more security-related updates. File : freebsd_pkg_238ae7dedba211e8b713b499baebfeaf.nasl - Type : ACT_GATHER_INFO |
| 2018-09-21 | Name : The remote PhotonOS host is missing multiple security updates. File : PhotonOS_PHSA-2018-2_0-0093.nasl - Type : ACT_GATHER_INFO |
| 2018-08-28 | Name : The remote FreeBSD host is missing one or more security-related updates. File : freebsd_pkg_0904e81fa89d11e8afbbbc5ff4f77b71.nasl - Type : ACT_GATHER_INFO |
| 2018-07-24 | Name : The remote PhotonOS host is missing multiple security updates. File : PhotonOS_PHSA-2018-1_0-0150.nasl - Type : ACT_GATHER_INFO |
| 2018-07-02 | Name : The remote Fedora host is missing a security update. File : fedora_2018-79841c871e.nasl - Type : ACT_GATHER_INFO |
