Browse all 470 CVE security advisories affecting HackerOne. AI-powered Chinese analysis, POCs, and references for each vulnerability.
HackerOne operates a crowdsourced vulnerability disclosure platform, connecting organizations with ethical hackers to identify and remediate security flaws before malicious exploitation. The platform’s extensive record of 470 CVEs highlights a diverse attack surface, with historically common vulnerability classes including remote code execution (RCE), cross-site scripting (XSS), and privilege escalation. These defects often stem from complex API integrations and web application logic errors inherent in its SaaS infrastructure. Notable security characteristics involve its reliance on third-party researchers, which introduces both robust coverage and potential insider threat vectors. While major public incidents have been relatively contained, the platform’s role as a central hub for vulnerability data makes it a high-value target for attackers seeking to disrupt the disclosure ecosystem or harvest sensitive intelligence. Maintaining strict access controls and transparent reporting mechanisms remains critical for preserving trust and ensuring the integrity of the bug bounty process across its global user base.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2017-16029 | hostr 路径遍历漏洞 — hostr node module CWE-22 | 7.5 | - | 2018-06-04 |
| CVE-2017-16030 | Useragent 安全漏洞 — useragent node module CWE-400 | 7.5 | - | 2018-06-04 |
| CVE-2017-16031 | socket.io 安全漏洞 — socket.io node module | 7.5 | - | 2018-06-04 |
| CVE-2017-16035 | hubl-server模块安全漏洞 — hubl-server node module CWE-311 | 8.1 | - | 2018-06-04 |
| CVE-2017-16036 | badjs-sourcemap-server 路径遍历漏洞 — badjs-sourcemap-server node module CWE-22 | 7.5 | - | 2018-06-04 |
| CVE-2017-16037 | gomeplus-h5-proxy 路径遍历漏洞 — gomeplus-h5-proxy node module CWE-22 | 7.5 | - | 2018-06-04 |
| CVE-2017-16038 | f2e-server 路径遍历漏洞 — f2e-server node module | 7.5 | - | 2018-06-04 |
| CVE-2017-16039 | hftp 路径遍历漏洞 — hftp node module CWE-22 | 7.5 | - | 2018-06-04 |
| CVE-2017-16040 | gfe-sass 安全漏洞 — gfe-sass node module CWE-311 | 8.1 | - | 2018-06-04 |
| CVE-2017-16041 | ikst 安全漏洞 — ikst node module CWE-311 | 5.9 | - | 2018-06-04 |
| CVE-2017-16042 | Growl 安全漏洞 — growl node module CWE-94 | 9.8 | - | 2018-06-04 |
| CVE-2017-16043 | Shout 安全漏洞 — shout node module CWE-80 | 6.1 | - | 2018-06-04 |
| CVE-2017-16044 | d3.js 安全漏洞 — d3.js node module CWE-506 | 7.5 | - | 2018-06-04 |
| CVE-2017-16045 | jquery.js 安全漏洞 — jquery.js node module CWE-506 | 7.5 | - | 2018-06-04 |
| CVE-2017-16046 | MariaDB 信息泄露漏洞 — mariadb node module CWE-506 | 7.5 | - | 2018-06-04 |
| CVE-2017-16048 | node-sqlite 安全漏洞 — node-sqlite node module CWE-506 | 7.5 | - | 2018-06-04 |
| CVE-2017-16049 | nodesqlite 安全漏洞 — nodesqlite node module CWE-506 | 7.5 | - | 2018-06-04 |
| CVE-2017-16050 | sqlite.js 安全漏洞 — sqlite.js node module CWE-506 | 7.5 | - | 2018-06-04 |
| CVE-2017-16051 | sqliter 安全漏洞 — sqliter node module CWE-506 | 7.5 | - | 2018-06-04 |
| CVE-2017-16052 | node-fabric 安全漏洞 — node-fabric node module CWE-506 | 7.5 | - | 2018-06-04 |
| CVE-2017-16053 | fabric-js 安全漏洞 — fabric-js node module CWE-506 | 7.5 | - | 2018-06-04 |
| CVE-2017-16054 | nodefabric 安全漏洞 — nodefabric node module CWE-506 | 7.5 | - | 2018-06-04 |
| CVE-2017-16055 | sqlserver 安全漏洞 — sqlserver node module CWE-506 | 7.5 | - | 2018-06-04 |
| CVE-2016-10636 | grunt-ccompiler 安全漏洞 — grunt-ccompiler node module CWE-311 | 8.1 | - | 2018-06-04 |
| CVE-2016-10637 | haxe-dev 安全漏洞 — haxe-dev node module CWE-311 | 8.1 | - | 2018-06-04 |
| CVE-2016-10638 | js-given 安全漏洞 — js-given node module CWE-311 | 8.1 | - | 2018-06-04 |
| CVE-2016-10639 | redis-srvr 安全漏洞 — redis-srvr node module CWE-311 | 8.1 | - | 2018-06-04 |
| CVE-2016-10640 | node-thulac 安全漏洞 — node-thulac node module CWE-311 | 8.1 | - | 2018-06-04 |
| CVE-2016-10641 | node-bsdiff-android 安全漏洞 — node-bsdiff-android node module CWE-311 | 8.1 | - | 2018-06-04 |
| CVE-2016-10642 | cmake 安全漏洞 — cmake node module CWE-311 | 8.1 | - | 2018-06-04 |
This page lists every published CVE security advisory associated with HackerOne. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.