漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
漏洞
N/A
漏洞信息
product-monitor is a HTML/JavaScript template for monitoring a product by encouraging product developers to gather all the information about the status of a product, including live monitoring, statistics, endpoints, and test results into one place. product-monitor versions below 2.2.5 download JavaScript resources over HTTP, which leaves the module vulnerable to MITM attacks. It may be possible to cause remote code execution (RCE) by swapping out the requested JavaScript file with an attacker controlled JavaScript file if the attacker is on the network or positioned in between the user and the remote server.
漏洞信息
N/A
漏洞
敏感数据加密缺失
漏洞
install-nw 安全漏洞
漏洞信息
install-nw是一个安装和缓存NW.j模块的工具。 install-nw 1.1.5之前版本中存在安全漏洞，该漏洞源于程序通过HTTP协议下载JavaScript资源。远程攻击者可通过用其控制的JavaScript文件替换被请求的JavaScript文件利用该漏洞执行代码。
漏洞信息
N/A
漏洞
N/A