Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2015-3454

TelescopeJS before 0.15 leaks user bcrypt password hashes in websocket messages, which might allow remote attackers to obtain password hashes via a cross-site scripting attack.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.018
EPSS Ranking 81.9%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
Products affected by CVE-2015-3454
  • Vulcanjs » Vulcan » Version: 0.10.0
    cpe:2.3:a:vulcanjs:vulcan:0.10.0
  • Vulcanjs » Vulcan » Version: 0.11.0
    cpe:2.3:a:vulcanjs:vulcan:0.11.0
  • Vulcanjs » Vulcan » Version: 0.11.1
    cpe:2.3:a:vulcanjs:vulcan:0.11.1
  • Vulcanjs » Vulcan » Version: 0.12.0
    cpe:2.3:a:vulcanjs:vulcan:0.12.0
  • Vulcanjs » Vulcan » Version: 0.12.1
    cpe:2.3:a:vulcanjs:vulcan:0.12.1
  • Vulcanjs » Vulcan » Version: 0.13.0
    cpe:2.3:a:vulcanjs:vulcan:0.13.0
  • Vulcanjs » Vulcan » Version: 0.14.0
    cpe:2.3:a:vulcanjs:vulcan:0.14.0
  • Vulcanjs » Vulcan » Version: 0.14.1
    cpe:2.3:a:vulcanjs:vulcan:0.14.1
  • Vulcanjs » Vulcan » Version: 0.14.2
    cpe:2.3:a:vulcanjs:vulcan:0.14.2
  • Vulcanjs » Vulcan » Version: 0.14.3
    cpe:2.3:a:vulcanjs:vulcan:0.14.3
  • Vulcanjs » Vulcan » Version: 0.9.10
    cpe:2.3:a:vulcanjs:vulcan:0.9.10
  • Vulcanjs » Vulcan » Version: 0.9.11
    cpe:2.3:a:vulcanjs:vulcan:0.9.11
  • Vulcanjs » Vulcan » Version: 0.9.4
    cpe:2.3:a:vulcanjs:vulcan:0.9.4
  • Vulcanjs » Vulcan » Version: 0.9.5
    cpe:2.3:a:vulcanjs:vulcan:0.9.5
  • Vulcanjs » Vulcan » Version: 0.9.6
    cpe:2.3:a:vulcanjs:vulcan:0.9.6
  • Vulcanjs » Vulcan » Version: 0.9.7
    cpe:2.3:a:vulcanjs:vulcan:0.9.7
  • Vulcanjs » Vulcan » Version: 0.9.8
    cpe:2.3:a:vulcanjs:vulcan:0.9.8
  • Vulcanjs » Vulcan » Version: 0.9.9
    cpe:2.3:a:vulcanjs:vulcan:0.9.9


Products
Pricing
Contact Us

Shodan ® - All rights reserved