CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 19/11/2021 |
| CVE-2021-3765 | 高危7.5 | validator.js is vulnerable to Inefficient Regular Expression Complexity | 02/11/2021 |
| CVE-2014-8882 | 高危7.5 | Regular Expression Denial of Service in validator | 31/08/2020 |
| CVE-2014-9772 | 中危6.1 | The validator package before 2.0.0 for Node.js allows remote attackers to bypass the cross-site scripting (XSS) filter via hex-encoded characters. | 23/01/2017 |
| CVE-2013-7454 | 中危6.1 | The validator module before 1.1.0 for Node.js allows remote attackers to bypass the cross-site scripting (XSS) filter via nested forbidden strings. | 23/01/2017 |
| CVE-2013-7453 | 中危6.1 | The validator module before 1.1.0 for Node.js allows remote attackers to bypass the cross-site scripting (XSS) filter via vectors related to UI redressing. | 23/01/2017 |
| CVE-2013-7452 | 中危6.1 | The validator module before 1.1.0 for Node.js allows remote attackers to bypass the cross-site scripting (XSS) filter via a crafted javascript URI. | 23/01/2017 |
| CVE-2013-7451 | 中危6.1 | The validator module before 1.1.0 for Node.js allows remote attackers to bypass the XSS filter via a nested tag. | 23/01/2017 |