CVE Vulnerability

CVE-2018-3738

by

protobufjs is vulnerable to ReDoS when parsing crafted invalid .proto files.

CVE-2018-3737

by

sshpk is vulnerable to ReDoS when parsing crafted invalid public keys.

CVE-2018-3736

by

** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2018-3739. Reason: This candidate is a duplicate of CVE-2018-3739. Notes: All CVE users should reference CVE-2018-3739 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.

CVE-2018-3735

by

bracket-template suffers from reflected XSS possible when variable passed via GET parameter is used in template

CVE-2018-3734

by

stattic node module suffers from a Path Traversal vulnerability due to lack of validation of path, which allows a malicious user to read content of any file with known path.

CVE-2018-3733

by

crud-file-server node module before 0.9.0 suffers from a Path Traversal vulnerability due to incorrect validation of url, which allows a malicious user to read content of any file with known path.