Known vulnerabilities in Nomad

Vendor: HashiCorp
Software: Nomad
Software CPE: cpe:2.3:a:hashicorp:nomad:*:*:*:*:*:*:*:*
Total vulnerabilities: 30
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Nomad Nomad is affected by 30 known vulnerabilities: 4 high, 21 medium, 5 low Critical High Medium Low

Vulnerabilities (30)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU101892 - Incorrect Privilege Assignment
CVE-2024-12678
CWE-266 Medium
No
No
1.9.4 20.12.2024 SB2024122062
#VU100098 - Missing Authorization
CVE-2024-10975
CWE-862 Medium
No
No
1.9.2 08.11.2024 SB2024110803
#VU99235 - Improper input validation
CWE-20 Low
No
No
1.9.1 22.10.2024 SB20241022352
#VU91160 - Improper input validation
CVE-2024-24790
CWE-20 Medium
No
No
1.8.1 05.06.2024 SB2024060520
SB2024060635
SB2024060729
and 90 more
#VU91159 - Improper input validation
CVE-2024-24789
CWE-20 Low
No
No
1.8.1 05.06.2024 SB2024060520
SB2024060635
SB2024060729
and 78 more
#VU88829 - Argument Injection or Modification
CVE-2024-3817
CWE-88 High
No
No
1.5.17, 1.6.10, 1.7.7 19.04.2024 SB2024041913
SB2024041914
SB2024072506
#VU87326 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-24786
CWE-835 Medium
No
No
1.5.16, 1.6.9, 1.7.6 11.03.2024 SB2024031115
SB2024031435
SB2024031555
and 134 more
#VU87200 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-24785
CWE-79 Low
No
No
1.5.16, 1.6.9, 1.7.6 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 61 more
#VU87197 - Resource exhaustion
CVE-2023-45290
CWE-400 Medium
No
No
1.5.16, 1.6.9, 1.7.6 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 101 more
#VU87196 - Error Handling
CVE-2024-24783
CWE-388 Medium
No
No
1.5.16, 1.6.9, 1.7.6 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 81 more
#VU78447 - Exposure of sensitive information to an unauthorized actor
CVE-2023-3299
CWE-200 Medium
No
No
1.4.11, 1.5.7, 1.6.0 20.07.2023 SB2023072022
#VU78446 - Exposure of sensitive information to an unauthorized actor
CVE-2023-3300
CWE-200 Medium
No
No
1.4.1, 1.5.7, 1.6.0 20.07.2023 SB2023072023
#VU78445 - Improper input validation
CVE-2023-3072
CWE-20 Low
No
No
1.4.11, 1.5.7, 1.6.0 20.07.2023 SB2023072022
#VU74577 - Improper Access Control
CVE-2023-1782
CWE-284 Medium
No
No
1.5.3 06.04.2023 SB2023040681
#VU74571 - Resource exhaustion
CVE-2023-24534
CWE-400 Medium
No
No
1.3.13, 1.4.8, 1.5.3 06.04.2023 SB2023040668
SB2023040678
SB2023040679
and 85 more
#VU63504 - Permissions, Privileges, and Access Controls
CVE-2022-30324
CWE-264 High
No
No
1.1.14, 1.2.8, 1.3.1 23.05.2022 SB2022052301
#VU60579 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-24683
CWE-22 Medium
No
No
1.0.17, 1.1.12, 1.2.6 14.02.2022 SB2022021407
#VU60578 - Improper input validation
CVE-2022-24684
CWE-20 Medium
No
No
1.0.17, 1.1.12, 1.2.6 14.02.2022 SB2022021407
#VU60577 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2022-24686
CWE-362 Medium
No
No
1.0.17, 1.1.12, 1.2.6 14.02.2022 SB2022021407
#VU60576 - Improper input validation
CVE-2022-24685
CWE-20 Medium
No
No
1.0.17, 1.1.12, 1.2.6 14.02.2022 SB2022021407


Showing elements 1 - 20 out of 30