Npm, Inc. vulnerabilities
3 vulnerabilities
Known vulnerabilities in Npm, Inc. products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 3 products.
Products
3- Buttle1 vulnerabilities
- Cordova Plugin Ionic Webview1 vulnerabilities
- Http Live Simulator1 vulnerabilities
CVE-2018-16202ionicframeworkionic_web_view+2
EPSS score3.31%
Directory traversal vulnerability in cordova-plugin-ionic-webview versions prior to 2.2.0 (not including 2.0.0-beta.0, 2.0.0-beta.1, 2.0.0-beta.2, and 2.1.0-0) allows remote attackers to access arbitrary files via unspecified vectors.CVE-2019-5422buttle_projectbuttle+2EPSS score1.17%
XSS in buttle npm package version 0.2.0 causes execution of attacker-provided code in the victim's browser when an attacker creates an arbitrary file on the server.CVE-2019-5423http-live-simulator_projecthttp-live-simulator+2EPSS score2.83%
Path traversal vulnerability in http-live-simulator npm package version 1.0.5 allows arbitrary path to be accessed on the file system by a remote attacker.