https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 23:38:23 +0000 https://cve.radiocsirt.org/vuln/cnvd-2016-09479 cnvd-2016-09479 https://cve.radiocsirt.org/vuln/cnvd-2016-09479 https://cve.radiocsirt.org/vuln/euvd-2026-85193 EUVD-2026-85193 https://cve.radiocsirt.org/vuln/euvd-2026-85193 https://cve.radiocsirt.org/vuln/fkie_cve-2016-5325 <p>CRLF injection vulnerability in the ServerResponse#writeHead function in Node.js 0.10.x before 0.10.47, 0.12.x before 0.12.16, 4.x before 4.6.0, and 6.x before 6.7.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the reason argument.</p> <p>CRLF injection vulnerability in the ServerResponse#writeHead function in Node.js 0.10.x before 0.10.47, 0.12.x before 0.12.16, 4.x before 4.6.0, and 6.x before 6.7.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the reason argument.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2016-5325 https://cve.radiocsirt.org/vuln/ghsa-qpf8-fqrf-8p2h <p>CRLF injection vulnerability in the ServerResponse#writeHead function in Node.js 0.10.x before 0.10.47, 0.12.x before 0.12.16, 4.x before 4.6.0, and 6.x before 6.7.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the reason argument.</p> <p>CRLF injection vulnerability in the ServerResponse#writeHead function in Node.js 0.10.x before 0.10.47, 0.12.x before 0.12.16, 4.x before 4.6.0, and 6.x before 6.7.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the reason argument.</p> https://cve.radiocsirt.org/vuln/ghsa-qpf8-fqrf-8p2h https://cve.radiocsirt.org/vuln/gsd-2016-5325 gsd-2016-5325 https://cve.radiocsirt.org/vuln/gsd-2016-5325 https://cve.radiocsirt.org/vuln/opensuse-su-2024:10247-1 <p>nodejs4-4.7.0-1.1 on GA media</p> <p>nodejs4-4.7.0-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:10247-1 https://cve.radiocsirt.org/vuln/rhsa-2016:2101 <p>nodejs: reason argument in ServerResponse#writeHead() not properly validated nodejs-tough-cookie: regular expression DoS via Cookie header with many semicolons</p> <p>nodejs: reason argument in ServerResponse#writeHead() not properly validated nodejs-tough-cookie: regular expression DoS via Cookie header with many semicolons</p> https://cve.radiocsirt.org/vuln/rhsa-2016:2101 https://cve.radiocsirt.org/vuln/suse-su-2016:2470-1 <p>Security update for nodejs4</p> <p>Security update for nodejs4</p> https://cve.radiocsirt.org/vuln/suse-su-2016:2470-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-5325 <p><strong>Affected:</strong> Ubuntu:14.04:LTS: nodejs, Ubuntu:16.04:LTS: nodejs</p> <p>CRLF injection vulnerability in the ServerResponse#writeHead function in Node.js 0.10.x before 0.10.47, 0.12.x before 0.12.16, 4.x before 4.6.0, and 6.x before 6.7.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the reason argument.</p> <p><strong>Affected:</strong> Ubuntu:14.04:LTS: nodejs, Ubuntu:16.04:LTS: nodejs</p> <p>CRLF injection vulnerability in the ServerResponse#writeHead function in Node.js 0.10.x before 0.10.47, 0.12.x before 0.12.16, 4.x before 4.6.0, and 6.x before 6.7.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via the reason argument.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2016-5325 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3114 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux Server und Red Hat Enterprise Linux Workstation ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen, einen Denial of Service Angriff durchzuführen, Sicherheitsvorkehrungen zu umgehen oder falsche Informationen darzustellen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux Server und Red Hat Enterprise Linux Workstation ausnutzen, um beliebigen Programmcode mit den Rechten des Dienstes auszuführen, einen Denial of Service Angriff durchzuführen, Sicherheitsvorkehrungen zu umgehen oder falsche Informationen darzustellen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3114