Known vulnerabilities in nodejs (Debian package) - page 3

Vendor: Debian
Software CPE: cpe:2.3:o:debian:nodejs_debian_package:*:*:*:*:*:debian_linux:*:*
Total vulnerabilities: 59
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting nodejs (Debian package) nodejs (Debian package) is affected by 59 known vulnerabilities: 2 high, 49 medium, 8 low Critical High Medium Low

Vulnerabilities (59)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU69354 - Reliance on Reverse DNS Resolution for a Security-Critical Action
CVE-2022-43548
CWE-350 Medium
No
No
12.22.12~dfsg-1~deb11u3 15.11.2022 SB2022111599
SB20221115101
SB20221115102
and 47 more
#VU59551 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-21824
CWE-94 Medium
No
No
12.22.12~dfsg-1~deb11u1 12.01.2022 SB2022011216
SB2022041205
SB2022060315
and 39 more
#VU59550 - Improper Certificate Validation
CVE-2021-44533
CWE-295 Medium
No
No
12.22.12~dfsg-1~deb11u1 12.01.2022 SB2022011216
SB2022041522
SB2022042517
and 36 more
#VU59549 - Improper Validation of Certificate with Host Mismatch
CVE-2021-44532
CWE-297 Medium
No
No
12.22.12~dfsg-1~deb11u1 12.01.2022 SB2022011216
SB2022041522
SB2022042806
and 36 more
#VU59548 - Improper Certificate Validation
CVE-2021-44531
CWE-295 Medium
No
No
12.22.12~dfsg-1~deb11u1 12.01.2022 SB2022011216
SB2022032010
SB2022041522
and 35 more
#VU59234 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-22960
CWE-444 Medium
No
No
12.22.12~dfsg-1~deb11u1 05.01.2022 SB2022010523
SB2022010524
SB2022042806
and 40 more
#VU59233 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-22959
CWE-444 Medium
No
No
12.22.12~dfsg-1~deb11u1 05.01.2022 SB2022010523
SB2022010524
SB2022011841
and 43 more
#VU50955 - Reliance on Reverse DNS Resolution for a Security-Critical Action
CVE-2021-22884
CWE-350 Medium
No
No
10.24.0~dfsg-1~deb10u1 25.02.2021 SB2021022530
SB2021022532
SB2021022616
and 38 more
#VU50954 - Resource Management Errors
CVE-2021-22883
CWE-399 Medium
No
No
10.24.0~dfsg-1~deb10u1 25.02.2021 SB2021022530
SB2021022532
SB2021022614
and 36 more
#VU49254 - Use After Free
CVE-2020-8265
CWE-416 Medium
No
No
10.23.1~dfsg-1~deb10u1 04.01.2021 SB2021010419
SB2021010704
SB2021010705
and 33 more
#VU49253 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-8287
CWE-444 Medium
Available
No
10.23.1~dfsg-1~deb10u1 04.01.2021 SB2021010419
SB2021010706
SB2021010707
and 33 more
#VU28539 - Memory corruption
CVE-2020-8174
CWE-119 High
No
No
10.21.0~dfsg-1~deb10u1 03.06.2020 SB2020060305
SB2020060607
SB2020072216
and 20 more
#VU28538 - Resource exhaustion
CVE-2020-11080
CWE-400 Medium
No
No
10.21.0~dfsg-1~deb10u1 03.06.2020 SB2020060305
SB2020060607
SB2020060703
and 42 more
#VU25014 - Reachable Assertion
CVE-2019-15604
CWE-617 Medium
No
No
10.19.0~dfsg1-1 06.02.2020 SB2020020615
SB2020022426
SB2020022514
and 10 more
#VU25013 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2019-15605
CWE-444 Medium
No
No
10.19.0~dfsg1-1 06.02.2020 SB2020020615
SB2020022426
SB2020022514
and 19 more
#VU25012 - Improper input validation
CVE-2019-15606
CWE-20 Medium
No
No
10.19.0~dfsg1-1 06.02.2020 SB2020020615
SB2020022426
SB2020022514
and 11 more
#VU20201 - Resource exhaustion
CVE-2019-9514
CWE-400 Medium
No
No
10.19.0~dfsg1-1 13.08.2019 SB2019081326
SB2019082004
SB2019082502
and 79 more
#VU20197 - Resource exhaustion
CVE-2019-9513
CWE-400 Medium
No
No
10.19.0~dfsg1-1 13.08.2019 SB2019081323
SB2019081326
SB2019081602
and 51 more
#VU20196 - Resource exhaustion
CVE-2019-9511
CWE-400 Medium
No
No
10.19.0~dfsg1-1 13.08.2019 SB2019081323
SB2019081326
SB2019081602
and 55 more


Showing elements 41 - 60 out of 59