Joyent records

20 published records for vendor joyent.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 1 · 5%
Pre-auth RCE: 1
With a fix record: 30%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

20 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
44Plan	CVE-2014-7192Proof of concept	Eval injection vulnerability in index.js in the syntax-error package before 1.1.1 for Node.js 0.10.x, as used in IBM Rational Application Dejoyent · node.js · CWE-94 pre-auth RCE	Critical10.0	—	13.0%	Dec 11, 2014
40Plan	CVE-2012-0217Weaponized	The x86-64 kernel system-call functionality in Xen 4.1.2 and earlier, as used in Citrix XenServer 6.0.2 and earlier and other products; Oracxen · xen · CWE-119 Local privilege escalation Memory safety	High7.2	—	39.8%	Jun 12, 2012
39Monitor	CVE-2020-27678No exploit	An issue was discovered in illumos before 2020-10-22, as used in OmniOS before r151030by, r151032ay, and r151034y and SmartOS before 2020102illumos · illumos · CWE-120 Pre-auth Memory safety	Critical9.8	—	1.4%	Oct 26, 2020
37Monitor	CVE-2017-10940No exploit	This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Joyent Smart Data Center prior to agentsjoyent · triton datacenter · CWE-22 RCE Path traversal	High8.8	—	5.4%	Oct 31, 2017
35Monitor	CVE-2016-8733No exploit	An exploitable integer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system.joyent · smartos · CWE-190 Local privilege escalation Memory safety	High8.8	—	0.5%	Dec 14, 2016
31Monitor	CVE-2014-6394No exploit	visionmedia send before 0.8.4 for Node.js uses a partial comparison for verifying whether a directory is within the document root, which allfedoraproject · fedora · CWE-22 Pre-auth Path traversal	High7.5	—	4.3%	Oct 8, 2014
31Monitor	CVE-2018-3737No exploit	sshpk is vulnerable to ReDoS when parsing crafted invalid public keys.joyent · sshpk · CWE-770 Pre-auth Denial of service	High7.5	—	1.7%	Jun 6, 2018
31Monitor	CVE-2016-9031No exploit	An exploitable integer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system.joyent · smartos · CWE-190 Local privilege escalation Memory safety	High7.8	—	0.4%	Dec 14, 2016
31Monitor	CVE-2018-1166No exploit	This vulnerability allows local attackers to escalate privileges on vulnerable installations of Joyent SmartOS release-20170803-20170803T064joyent · smartos · CWE-416 Local privilege escalation Memory safety	High7.8	—	0.3%	Feb 21, 2018
30Monitor	CVE-2017-16005No exploit	Http-signature is a "Reference implementation of Joyent's HTTP Signature Scheme".joyent · http-signature · CWE-20 Pre-auth	High7.5	—	0.8%	Jun 4, 2018
29Monitor	CVE-2020-7712No exploit	This affects the package json before 10.0.0.joyent · json · CWE-78 RCE Command injection	High7.2	—	3.1%	Aug 30, 2020
28Monitor	CVE-2016-9035No exploit	An exploitable buffer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system.joyent · smartos · CWE-120 Local privilege escalation Memory safety	High7.0	—	0.5%	Dec 14, 2016
28Monitor	CVE-2016-9034No exploit	An exploitable buffer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system.joyent · smartos · CWE-120 Local privilege escalation Memory safety	High7.0	—	0.5%	Dec 14, 2016
28Monitor	CVE-2016-9033No exploit	An exploitable buffer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system.joyent · smartos · CWE-120 Local privilege escalation Memory safety	High7.0	—	0.5%	Dec 14, 2016
28Monitor	CVE-2016-9032No exploit	An exploitable buffer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system.joyent · smartos · CWE-120 Local privilege escalation Memory safety	High7.0	—	0.5%	Dec 14, 2016
28Monitor	CVE-2018-1165No exploit	This vulnerability allows local attackers to escalate privileges on vulnerable installations of Joyent SmartOS release-20170803-20170803T064joyent · smartos · CWE-122 Local privilege escalation Memory safety	High7.0	—	0.4%	Feb 21, 2018
28Monitor	CVE-2018-1171No exploit	This vulnerability allows local attackers to escalate privileges on vulnerable installations of Joyent SmartOS release-20170803-20170803T064joyent · smartos · CWE-787 Local privilege escalation Memory safety	High7.0	—	0.4%	Mar 19, 2018
22Monitor	CVE-2016-9039No exploit	An exploitable denial of service exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system.joyent · smartos · CWE-400 Denial of service	Medium5.5	—	0.5%	Jan 31, 2017
22Monitor	CVE-2016-9040No exploit	An exploitable denial of service exists in the the Joyent SmartOS OS 20161110T013148Z Hyprlofs file system.joyent · smartos · CWE-400 Denial of service	Medium5.5	—	0.4%	Sep 7, 2018
22Monitor	CVE-2021-43395No exploit	An issue was discovered in illumos before f859e7171bb5db34321e45585839c6c3200ebb90, OmniOS Community Edition r151038, OpenIndiana Hipster 20illumos · illumos · CWE-667 Local privilege escalation Denial of service	Medium5.5	—	0.3%	Dec 26, 2022

CVE-2014-7192
44Plan
Eval injection vulnerability in index.js in the syntax-error package before 1.1.1 for Node.js 0.10.x, as used in IBM Rational Application De
CriticalCVSS 10.0Proof of conceptEPSS 13%
- pre-auth RCE
joyent · node.jsDec 11, 2014
CVE-2012-0217
40Plan
The x86-64 kernel system-call functionality in Xen 4.1.2 and earlier, as used in Citrix XenServer 6.0.2 and earlier and other products; Orac
HighCVSS 7.2WeaponizedEPSS 39%
- Local privilege escalation
- Memory safety
xen · xenJun 12, 2012
CVE-2020-27678
39Monitor
An issue was discovered in illumos before 2020-10-22, as used in OmniOS before r151030by, r151032ay, and r151034y and SmartOS before 2020102
CriticalCVSS 9.8No exploitEPSS 1%
- Pre-auth
- Memory safety
illumos · illumosOct 26, 2020
CVE-2017-10940
37Monitor
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Joyent Smart Data Center prior to agents
HighCVSS 8.8No exploitEPSS 5%
- RCE
- Path traversal
joyent · triton datacenterOct 31, 2017
CVE-2016-8733
35Monitor
An exploitable integer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system.
HighCVSS 8.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
joyent · smartosDec 14, 2016
CVE-2014-6394
31Monitor
visionmedia send before 0.8.4 for Node.js uses a partial comparison for verifying whether a directory is within the document root, which all
HighCVSS 7.5No exploitEPSS 4%
- Pre-auth
- Path traversal
fedoraproject · fedoraOct 8, 2014
CVE-2018-3737
31Monitor
sshpk is vulnerable to ReDoS when parsing crafted invalid public keys.
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Denial of service
joyent · sshpkJun 6, 2018
CVE-2016-9031
31Monitor
An exploitable integer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system.
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
joyent · smartosDec 14, 2016
CVE-2018-1166
31Monitor
This vulnerability allows local attackers to escalate privileges on vulnerable installations of Joyent SmartOS release-20170803-20170803T064
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
- Memory safety
joyent · smartosFeb 21, 2018
CVE-2017-16005
30Monitor
Http-signature is a "Reference implementation of Joyent's HTTP Signature Scheme".
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
joyent · http-signatureJun 4, 2018
CVE-2020-7712
29Monitor
This affects the package json before 10.0.0.
HighCVSS 7.2No exploitEPSS 3%
- RCE
- Command injection
joyent · jsonAug 30, 2020
CVE-2016-9035
28Monitor
An exploitable buffer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system.
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Memory safety
joyent · smartosDec 14, 2016
CVE-2016-9034
28Monitor
An exploitable buffer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system.
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Memory safety
joyent · smartosDec 14, 2016
CVE-2016-9033
28Monitor
An exploitable buffer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system.
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Memory safety
joyent · smartosDec 14, 2016
CVE-2016-9032
28Monitor
An exploitable buffer overflow exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system.
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Memory safety
joyent · smartosDec 14, 2016
CVE-2018-1165
28Monitor
This vulnerability allows local attackers to escalate privileges on vulnerable installations of Joyent SmartOS release-20170803-20170803T064
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Memory safety
joyent · smartosFeb 21, 2018
CVE-2018-1171
28Monitor
This vulnerability allows local attackers to escalate privileges on vulnerable installations of Joyent SmartOS release-20170803-20170803T064
HighCVSS 7.0No exploitEPSS 0%
- Local privilege escalation
- Memory safety
joyent · smartosMar 19, 2018
CVE-2016-9039
22Monitor
An exploitable denial of service exists in the Joyent SmartOS 20161110T013148Z Hyprlofs file system.
MediumCVSS 5.5No exploitEPSS 0%
- Denial of service
joyent · smartosJan 31, 2017
CVE-2016-9040
22Monitor
An exploitable denial of service exists in the the Joyent SmartOS OS 20161110T013148Z Hyprlofs file system.
MediumCVSS 5.5No exploitEPSS 0%
- Denial of service
joyent · smartosSep 7, 2018
CVE-2021-43395
22Monitor
An issue was discovered in illumos before f859e7171bb5db34321e45585839c6c3200ebb90, OmniOS Community Edition r151038, OpenIndiana Hipster 20
MediumCVSS 5.5No exploitEPSS 0%
- Local privilege escalation
- Denial of service
illumos · illumosDec 26, 2022