Known vulnerabilities in Node.js - page 8

Software: Node.js
Software CPE: cpe:2.3:a:node_js_foundation:nodejs:*:*:*:*:*:*:*:*
Total vulnerabilities: 182
Public exploits: 11
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Node.js Node.js is affected by 182 known vulnerabilities: 12 high, 113 medium, 57 low Critical High Medium Low

Vulnerabilities (182)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU28539 - Memory corruption
CVE-2020-8174
CWE-119 High
No
No
10.21.0, 12.18.0, 14.4.0 03.06.2020 SB2020060305
SB2020060607
SB2020072216
and 20 more
#VU28538 - Resource exhaustion
CVE-2020-11080
CWE-400 Medium
No
No
10.21.0, 12.18.0, 14.4.0 03.06.2020 SB2020060305
SB2020060607
SB2020060703
and 42 more
#VU28537 - Improper Authorization
CVE-2020-8172
CWE-285 Medium
No
No
12.18.0, 14.4.0 03.06.2020 SB2020060305
SB2020060364
SB2020060365
and 9 more
#VU26292 - Resource Management Errors
CVE-2019-5739
CWE-399 Medium
No
No
6.17.0 21.03.2020 SB2019032825
SB2020032103
SB2019040816
and 1 more
#VU26284 - Resource exhaustion
CVE-2019-5737
CWE-400 Medium
No
No
6.17.0, 8.15.1, 10.15.2, 11.10.1 20.03.2020 SB2019032825
SB2020032103
SB2019041610
and 7 more
#VU26149 - Integer overflow
CVE-2020-10531
CWE-190 High
No
No
10.21.0 17.03.2020 SB2020031801
SB2020031802
SB2020031803
and 40 more
#VU25014 - Reachable Assertion
CVE-2019-15604
CWE-617 Medium
No
No
10.19.0, 12.15.0, 13.8.0 06.02.2020 SB2020020615
SB2020022426
SB2020022514
and 10 more
#VU25013 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2019-15605
CWE-444 Medium
No
No
10.19.0, 12.15.0, 13.8.0 06.02.2020 SB2020020615
SB2020022426
SB2020022514
and 19 more
#VU25012 - Improper input validation
CVE-2019-15606
CWE-20 Medium
No
No
10.19.0, 12.15.0, 13.8.0 06.02.2020 SB2020020615
SB2020022426
SB2020022514
and 11 more
#VU16170 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2018-12123
CWE-451 Low
No
No
6.15.0, 8.14.0, 10.14.0, 11.3.0 29.11.2018 SB2018112906
SB2019012702
SB2019012803
and 6 more
#VU16169 - Resource exhaustion
CVE-2018-12122
CWE-400 Low
No
No
6.15.0, 8.14.0, 10.14.0, 11.3.0 29.11.2018 SB2018112906
SB2019012702
SB2019012803
and 6 more
#VU16168 - Heap-based Buffer Overflow
CVE-2018-12121
CWE-122 Low
No
No
6.15.0, 8.14.0, 10.14.0, 11.3.0 29.11.2018 SB2018112906
SB2019012702
SB2019012803
and 8 more
#VU16167 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-12120
CWE-79 Low
No
No
6.15.0 29.11.2018 SB2018112906
SB2019012702
SB2019022215
and 1 more
#VU31290 - Exposure of sensitive information to an unauthorized actor
CVE-2017-16024
CWE-200 Medium
No
No
0.11.9 04.06.2018 SB2018060421
#VU33508 - Exposure of sensitive information to an unauthorized actor
CVE-2017-15897
CWE-200 Low
No
No
- 11.12.2017 SB20171211323
SB2017120905
#VU32063 - Improper input validation
CVE-2017-14919
CWE-20 Medium
No
No
4.8.5, 6.11.5, 8.8.0 30.10.2017 SB2017103014
SB2017102618
SB2017102621
and 2 more
#VU33284 - Resource exhaustion
CVE-2015-7384
CWE-400 Medium
No
No
4.1.0 10.10.2017 SB2017101035
SB2015101305
#VU32225 - Data Handling
CVE-2016-7099
CWE-19 Medium
No
No
0.10.47 10.10.2016 SB2016101014
SB2016110832
SB2016110833
and 4 more
#VU32332 - Improper input validation
CVE-2016-2216
CWE-20 Medium
No
No
0.10.42 08.04.2016 SB2016040811
SB2016022308
SB2016021016
and 3 more
#VU32331 - Improper input validation
CVE-2016-2086
CWE-20 Medium
No
No
0.10.42 08.04.2016 SB2016040810
SB2016022307
SB2016021016
and 3 more


Showing elements 141 - 160 out of 182