HackerOne
Number 42 by total vulnerabilities in the catalog.
Computed from the whole catalog when the site is built.
Total vulnerabilities
470
Critical
0
High
2
Known Exploited
0
Exploit available
1
Network, no login needed
100.0%
Of 2 scored records
- Critical
- High
- Medium
- Low
- None or not scored
Show as table
| Period | Total | Critical | High | Medium | Low | None or not scored |
|---|---|---|---|---|---|---|
| 2026 (incomplete) | 0 | 0 | 0 | 0 | 0 | 0 |
| 2025 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2024 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2023 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2022 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2021 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2020 | 0 | 0 | 0 | 0 | 0 | 0 |
| 2019 | 15 | 0 | 0 | 0 | 0 | 15 |
| 2018 | 449 | 0 | 2 | 0 | 0 | 447 |
| 2017 | 6 | 0 | 0 | 0 | 0 | 6 |
Top products
| Product | Total | Critical/High |
|---|---|---|
| RubyGems | 4 | 0 |
| hapi node module | 4 | 0 |
| sequelize node module | 4 | 0 |
| coffeescript node module | 3 | 0 |
| Nextcloud Server | 2 | 0 |
| crud-file-server node module | 2 | 0 |
| express-cart | 2 | 0 |
| html-janitor node module | 2 | 0 |
| i18next node module | 2 | 0 |
| m-server | 2 | 0 |
Top bug types
| Bug type | Total | Critical/High |
|---|---|---|
| Missing Encryption of Sensitive Data (CWE-311) | 144 | 0 |
| Path Traversal | 141 | 0 |
| Embedded Malicious Code | 44 | 0 |
| Denial of Service | 41 | 2 |
| Cross-Site Scripting | 22 | 0 |
| Code Injection | 8 | 0 |
| Improper Input Validation | 6 | 0 |
| SQL Injection | 6 | 0 |
| Modification of Assumed-Immutable Data (MAID) (CWE-471) | 5 | 0 |
| Information Disclosure | 4 | 0 |
Newest vulnerabilities
| CVE | Title | Published | Severity | EPSS |
|---|---|---|---|---|
| CVE-2017-0938 | HackerOne airMAX, EdgeMAX: Denial of Service | None | 21.0% | |
| CVE-2018-16493 | HackerOne static-resource-server vulnerability | None | 1.8% | |
| CVE-2018-16492 | HackerOne extend: Denial of Service | None | 3.0% | |
| CVE-2018-16491 | HackerOne node.extend: Denial of Service | None | 1.7% | |
| CVE-2018-16490 | HackerOne mpath: Denial of Service | None | 1.1% | |
| CVE-2018-16489 | HackerOne just-extend: Denial of Service | None | 1.8% | |
| CVE-2018-16487 | HackerOne lodash: Denial of Service | None | 1.5% | |
| CVE-2018-16486 | HackerOne defaults-deep: Denial of Service | None | 1.5% | |
| CVE-2018-16485 | HackerOne m-server: Path Traversal | None | 1.3% | |
| CVE-2018-16484 | HackerOne m-server: Cross-Site Scripting | None | 0.6% |