Known vulnerabilities in Node.js - page 7

Software: Node.js
Software CPE: cpe:2.3:a:node_js_foundation:nodejs:*:*:*:*:*:*:*:*
Total vulnerabilities: 182
Public exploits: 11
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Node.js Node.js is affected by 182 known vulnerabilities: 12 high, 113 medium, 57 low Critical High Medium Low

Vulnerabilities (182)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU59551 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-21824
CWE-94 Medium
No
No
12.22.9, 14.18.3, 16.13.2, 17.3.1 12.01.2022 SB2022011216
SB2022041205
SB2022060315
and 39 more
#VU59550 - Improper Certificate Validation
CVE-2021-44533
CWE-295 Medium
No
No
12.22.9, 14.18.3, 16.13.2, 17.3.1 12.01.2022 SB2022011216
SB2022041522
SB2022042517
and 36 more
#VU55560 - Use After Free
CVE-2021-22930
CWE-416 High
No
No
12.22.4, 14.17.4, 16.6.0 03.08.2021 SB2021080320
SB2021080324
SB2021080325
and 35 more
#VU54624 - Out-of-bounds read
CVE-2021-22918
CWE-125 Medium
No
No
12.22.2, 14.17.2, 16.4.1 08.07.2021 SB2021070819
SB2021072009
SB2021081123
and 40 more
#VU50955 - Reliance on Reverse DNS Resolution for a Security-Critical Action
CVE-2021-22884
CWE-350 Medium
No
No
10.24.0, 12.21.0, 14.16.0, 15.10.0 25.02.2021 SB2021022530
SB2021022532
SB2021022616
and 38 more
#VU50954 - Resource Management Errors
CVE-2021-22883
CWE-399 Medium
No
No
10.24.0, 12.21.0, 14.16.0, 15.10.0 25.02.2021 SB2021022530
SB2021022532
SB2021022614
and 36 more
#VU50745 - Improper input validation
CVE-2021-23840
CWE-20 Medium
No
No
10.24.0, 12.21.0, 14.16.0, 15.10.0 17.02.2021 SB2021021702
SB2021021817
SB2021022420
and 83 more
#VU49254 - Use After Free
CVE-2020-8265
CWE-416 Medium
No
No
10.23.1, 12.20.1, 14.15.4, 15.5.1 04.01.2021 SB2021010419
SB2021010704
SB2021010705
and 33 more
#VU49253 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-8287
CWE-444 Medium
Available
No
10.23.1, 12.20.1, 14.15.4, 15.5.1 04.01.2021 SB2021010419
SB2021010706
SB2021010707
and 33 more
#VU48896 - NULL Pointer Dereference
CVE-2020-1971
CWE-476 Medium
Available
No
10.23.1, 12.20.1, 14.15.4 08.12.2020 SB2020120852
SB2020120903
SB2020120905
and 91 more
#VU48569 - Resource Management Errors
CVE-2020-8277
CWE-399 Medium
Available
No
12.19.1, 14.15.1, 15.2.1 19.11.2020 SB2020112003
SB2020112005
SB2020102133
and 23 more
#VU47248 - Buffer overflow
CVE-2020-8252
CWE-120 High
No
No
10.22.1, 12.18.4, 14.9.0 18.09.2020 SB2020100117
SB2020091824
SB2020091825
and 19 more
#VU33773 - Improper input validation
CVE-2017-15896
CWE-20 High
No
No
- 11.12.2017 SB20171211326
SB2017120904
#VU38185 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2017-14849
CWE-22 Medium
No
No
- 28.09.2017 SB2017092815
#VU38646 - Improper input validation
CVE-2017-11499
CWE-20 Medium
No
No
- 25.07.2017 SB2017072512
SB2017071429
SB2017101823
#VU39802 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2013-7451
CWE-79 Low
No
No
- 23.01.2017 SB2017012322
#VU33814 - Improper input validation
CVE-2015-8027
CWE-20 Medium
No
No
0.12.9 02.01.2016 SB2016010202
SB2015120914
#VU41349 - Memory corruption
CVE-2014-5256
CWE-119 Medium
No
No
- 05.09.2014 SB2014090501
SB2014080106
#VU42456 - Improper input validation
CVE-2013-4450
CWE-20 Medium
Available
No
- 21.10.2013 SB2013102101
SB2013101806
#VU43730 - Improper input validation
CVE-2012-2330
CWE-20 Medium
No
No
- 14.08.2012 SB2012081404


Showing elements 121 - 140 out of 182