Vendor
hackerone
Public exploit10
CVEs in the catalog
470
since 2017-08
Months in the top 100
10
months with a stored rank
Best rank
#1
one month recomputed
Affected scope
Products and weakness classes
Products
| Product | CVEs | Share |
|---|---|---|
| hapi node module | 4 | 0.9% |
| rubygems | 4 | 0.9% |
| sequelize node module | 4 | 0.9% |
| coffeescript node module | 3 | 0.6% |
| crud file server node module | 2 | 0.4% |
| express cart | 2 | 0.4% |
| html janitor node module | 2 | 0.4% |
| i18next node module | 2 | 0.4% |
| m server | 2 | 0.4% |
| marked node module | 2 | 0.4% |
| nextcloud server | 2 | 0.4% |
| nodemailer js node module | 2 | 0.4% |
Weakness classes
| Weakness | CVEs | Share |
|---|---|---|
| CWE-311 | 144 | 31% |
| CWE-22 | 141 | 30% |
| CWE-506 | 44 | 9% |
| CWE-400 | 41 | 9% |
| CWE-79 | 22 | 5% |
| CWE-94 | 8 | 2% |
| CWE-20 | 6 | 1% |
| CWE-89 | 6 | 1% |
Latest CVEs
15 most recently published
Enriched records open their full page; the rest open their catalog record.
| CVE | Weakness | Signals | CVSS | Published |
|---|---|---|---|---|
| CVE-2017-0938 | CWE-400 | none yet | n/a | 2019-02-12 |
| CVE-2018-16493 | CWE-548 | none yet | n/a | 2019-02-01 |
| CVE-2018-16492 | CWE-400 | 1 | n/a | 2019-02-01 |
| CVE-2018-16491 | CWE-400 | none yet | n/a | 2019-02-01 |
| CVE-2018-16490 | CWE-400 | none yet | n/a | 2019-02-01 |
| CVE-2018-16489 | CWE-400 | none yet | n/a | 2019-02-01 |
| CVE-2018-16487 | CWE-400 | none yet | n/a | 2019-02-01 |
| CVE-2018-16486 | CWE-400 | none yet | n/a | 2019-02-01 |
| CVE-2018-16485 | CWE-22 | none yet | n/a | 2019-02-01 |
| CVE-2018-16484 | CWE-79 | none yet | n/a | 2019-02-01 |
| CVE-2018-16483 | n/a | none yet | n/a | 2019-02-01 |
| CVE-2018-16482 | CWE-22 | none yet | n/a | 2019-02-01 |
| CVE-2018-16481 | CWE-79 | none yet | n/a | 2019-02-01 |
| CVE-2018-16480 | CWE-79 | none yet | n/a | 2019-02-01 |
| CVE-2018-16479 | CWE-22 | none yet | n/a | 2019-02-01 |