CVE CyberSecurity Database News (Page 644)

Sep 7, 2024 RCE Exploit Java

CVE-2024-40711 - Deserialization of Untrusted Data Leads to Remote Code Execution (RCE)

In June 2024, a serious vulnerability surfaced under the identifier CVE-2024-40711. This security threat involves improper handling of untrusted serialized data, opening doors

Sep 7, 2024 Exploit

CVE-2024-36137 - Node.js File Descriptor Exploit in Permission Model with --allow-fs-write

A newly-discovered vulnerability, CVE-2024-36137, affects the Node.js runtime when using the *experimental permission model*. This flaw allows attackers to bypass the

Sep 7, 2024 Exploit

CVE-2023-39333 - Injecting JavaScript with WebAssembly Export Names in Node.js

WebAssembly (WASM) is a powerful tool for running high-performance code in browsers and other environments. But what happens when the very WASM modules you

Sep 7, 2024 API Exploit

CVE-2023-46809 - Node.js and the Marvin Attack — Exploiting Weaknesses in PKCS #1 v1.5 Padding with OpenSSL

CVE-2023-46809 reveals a serious security issue for Node.js applications that use unpatched OpenSSL libraries and allow PKCS #1 v1.5 padding in

Sep 7, 2024

CVE-2023-30584 - Path Traversal Bypass in Node.js 20 Experimental Permission Model

Node.js is one of the world’s most popular server-side runtimes, powering everything from small apps to large-scale services. In early 2023,