CWE-506

Embedded Malicious Code

ClassIncomplete

Description

The product contains code that appears to be malicious in nature.

Malicious flaws have acquired colorful names, including Trojan horse, trapdoor, timebomb, and logic-bomb. A developer might insert malicious code with the intent to subvert the security of a product or its host system at some time in the future. It generally refers to a program that performs a useful service but exploits rights of the program's user in a way the user does not intend.

Hierarchy (View 1000)

Parents

CWE-912

Children

Related attack patterns (CAPEC)

CAPEC-442 · CAPEC-448 · CAPEC-636

CVEs mapped to this weakness (82)

page 3 of 5

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2017-16075	—	Hig	0.49	7.5	0.01	Jun 7, 2018	http-proxy.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16074	Hackerone Cross Env.js Node Module	Hig	0.49	7.5	0.01	Jun 7, 2018	crossenv was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16073	—	Hig	0.49	7.5	0.01	Jun 7, 2018	noderequest was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16072	Hackerone Nodemailer Js Node Module	Hig	0.49	7.5	0.01	Jun 7, 2018	nodemailer.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16071	Hackerone Nodemailer Js Node Module	Hig	0.49	7.5	0.01	Jun 7, 2018	nodemailer-js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16070	—	Hig	0.49	7.5	0.01	Jun 7, 2018	nodecaffe was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16069	—	Hig	0.49	7.5	0.01	Jun 7, 2018	nodeffmpeg was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16068	—	Hig	0.49	7.5	0.01	Jun 7, 2018	ffmepg was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16067	Hackerone Node Opensl Node Module	Hig	0.49	7.5	0.01	Jun 7, 2018	node-opencv was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16066	Hackerone Node Opensl Node Module	Hig	0.49	7.5	0.01	Jun 7, 2018	opencv.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16065	Hackerone Node Openssl Node Module	Hig	0.49	7.5	0.01	Jun 7, 2018	openssl.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16064	Hackerone Node Openssl Node Module	Hig	0.49	7.5	0.01	Jun 7, 2018	node-openssl was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16063	Hackerone Node Opensl Node Module	Hig	0.49	7.5	0.01	Jun 7, 2018	node-opensl was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16060	—	Hig	0.49	7.5	0.01	Jun 7, 2018	babelcli was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16059	Hackerone Mysql Node Module	Hig	0.49	7.5	0.01	Jun 7, 2018	mssql-node was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16058	—	Hig	0.49	7.5	0.01	Jun 7, 2018	gruntcli was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16057	Hackerone Mysql Node Module	Hig	0.49	7.5	0.01	Jun 7, 2018	nodemssql was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16056	Hackerone Uri Js Node Module	Hig	0.49	7.5	0.01	Jun 7, 2018	mssql.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16055	Hackerone Crud File Server Node Module	Hig	0.49	7.5	0.01	Jun 4, 2018	`sqlserver` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16054	—	Hig	0.49	7.5	0.01	Jun 4, 2018	`nodefabric` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.

CVE-2017-16075HigJun 7, 2018
risk 0.49cvss 7.5epss 0.01
http-proxy.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16074HigJun 7, 2018
Hackerone
Cross Env.js Node Module
risk 0.49cvss 7.5epss 0.01
crossenv was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16073HigJun 7, 2018
risk 0.49cvss 7.5epss 0.01
noderequest was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16072HigJun 7, 2018
Hackerone
Nodemailer Js Node Module
risk 0.49cvss 7.5epss 0.01
nodemailer.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16071HigJun 7, 2018
Hackerone
Nodemailer Js Node Module
risk 0.49cvss 7.5epss 0.01
nodemailer-js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16070HigJun 7, 2018
risk 0.49cvss 7.5epss 0.01
nodecaffe was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16069HigJun 7, 2018
risk 0.49cvss 7.5epss 0.01
nodeffmpeg was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16068HigJun 7, 2018
risk 0.49cvss 7.5epss 0.01
ffmepg was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16067HigJun 7, 2018
Hackerone
Node Opensl Node Module
risk 0.49cvss 7.5epss 0.01
node-opencv was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16066HigJun 7, 2018
Hackerone
Node Opensl Node Module
risk 0.49cvss 7.5epss 0.01
opencv.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16065HigJun 7, 2018
Hackerone
Node Openssl Node Module
risk 0.49cvss 7.5epss 0.01
openssl.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16064HigJun 7, 2018
Hackerone
Node Openssl Node Module
risk 0.49cvss 7.5epss 0.01
node-openssl was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16063HigJun 7, 2018
Hackerone
Node Opensl Node Module
risk 0.49cvss 7.5epss 0.01
node-opensl was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16060HigJun 7, 2018
risk 0.49cvss 7.5epss 0.01
babelcli was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16059HigJun 7, 2018
Hackerone
Mysql Node Module
risk 0.49cvss 7.5epss 0.01
mssql-node was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16058HigJun 7, 2018
risk 0.49cvss 7.5epss 0.01
gruntcli was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16057HigJun 7, 2018
Hackerone
Mysql Node Module
risk 0.49cvss 7.5epss 0.01
nodemssql was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16056HigJun 7, 2018
Hackerone
Uri Js Node Module
risk 0.49cvss 7.5epss 0.01
mssql.js was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16055HigJun 4, 2018
Hackerone
Crud File Server Node Module
risk 0.49cvss 7.5epss 0.01
`sqlserver` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.
CVE-2017-16054HigJun 4, 2018
risk 0.49cvss 7.5epss 0.01
`nodefabric` was a malicious module published with the intent to hijack environment variables. It has been unpublished by npm.