Known vulnerabilities in nodejs-packaging - page 3

Vendor: OpenAnolis
Software CPE: cpe:2.3:o:openanolis:nodejs-packaging:*:*:*:*:*:anolis_os:*:*
Total vulnerabilities: 96
Public exploits: 4
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting nodejs-packaging nodejs-packaging is affected by 96 known vulnerabilities: 7 high, 72 medium, 17 low Critical High Medium Low

Vulnerabilities (96)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU82066 - Exposure of sensitive information to an unauthorized actor
CVE-2023-45143
CWE-200 Medium
No
No
2021.06-4 17.10.2023 SB2023101702
SB2023101703
SB2023101801
and 31 more
#VU79335 - Permissions, Privileges, and Access Controls
CVE-2023-32559
CWE-264 Medium
No
No
26-1.0.1, 2021.06-4 10.08.2023 SB2023081012
SB2023081443
SB2023081705
and 39 more
#VU79334 - Permissions, Privileges, and Access Controls
CVE-2023-32006
CWE-264 Medium
No
No
26-1.0.1, 2021.06-4 10.08.2023 SB2023081012
SB2023081443
SB2023081705
and 38 more
#VU79332 - Permissions, Privileges, and Access Controls
CVE-2023-32002
CWE-264 Medium
No
No
26-1.0.1, 2021.06-4 10.08.2023 SB2023081012
SB2023081443
SB2023081705
and 44 more
#VU78932 - Incorrect Regular Expression
CVE-2022-25883
CWE-185 Medium
No
No
26-1.0.1, 2021.06-4 03.08.2023 SB2023080361
SB2023080362
SB2023081514
and 73 more
#VU77606 - Inconsistency Between Implementation and Documented Design
CVE-2023-30590
CWE-1068 Medium
No
No
25-1.0.1, 2021.06-4 21.06.2023 SB2023062144
SB2023062727
SB2023062743
and 33 more
#VU77605 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-30589
CWE-444 Medium
No
No
25-1.0.1, 2021.06-4 21.06.2023 SB2023062144
SB2023062727
SB2023062743
and 43 more
#VU77604 - Improper input validation
CVE-2023-30588
CWE-20 Medium
No
No
25-1.0.1, 2021.06-4 21.06.2023 SB2023062144
SB2023062727
SB2023062743
and 33 more
#VU77586 - Permissions, Privileges, and Access Controls
CVE-2023-30581
CWE-264 Medium
No
No
25-1.0.1, 2021.06-4 21.06.2023 SB2023062144
SB2023062727
SB2023062743
and 31 more
#VU76426 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2023-31147
CWE-338 Medium
No
No
25-1.0.1, 2021.06-4 23.05.2023 SB2023052309
SB2023052312
SB2023053021
and 39 more
#VU76425 - Buffer Underwrite ('Buffer Underflow')
CVE-2023-31130
CWE-124 Low
No
No
25-1.0.1, 2021.06-4 23.05.2023 SB2023052309
SB2023052312
SB2023053021
and 55 more
#VU76424 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2023-31124
CWE-338 Medium
No
No
25-1.0.1, 2021.06-4 23.05.2023 SB2023052309
SB2023052312
SB2023053021
and 33 more
#VU76423 - Improper input validation
CVE-2023-32067
CWE-20 Medium
No
No
25-1.0.1, 2021.06-4 23.05.2023 SB2023052312
SB2023053021
SB2023060711
and 35 more
#VU76422 - Improper input validation
CVE-2023-32067
CWE-20 Medium
No
No
25-1.0.1, 2021.06-4 23.05.2023 SB2023052309
SB2023052312
SB2023053021
and 66 more
#VU72750 - Inefficient Algorithmic Complexity
CVE-2022-25881
CWE-407 Medium
No
No
23-3, 25-1.0.1 03.03.2023 SB2023030326
SB2023030328
SB2023031112
and 61 more
#VU72557 - Memory corruption
CVE-2022-4904
CWE-119 Low
No
No
23-3, 25-1.0.1, 2021.06-4 24.02.2023 SB2023022410
SB2023022502
SB2023030233
and 38 more
#VU72404 - Incorrect Regular Expression
CVE-2023-24807
CWE-185 Medium
No
No
25-1.0.1 20.02.2023 SB2023022022
SB2023022020
SB2023030129
and 34 more
#VU72403 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2023-23936
CWE-113 Medium
No
No
25-1.0.1 20.02.2023 SB2023022022
SB2023022020
SB2023030129
and 35 more
#VU72400 - Permissions, Privileges, and Access Controls
CVE-2023-23920
CWE-264 Low
No
No
23-3, 25-1.0.1 20.02.2023 SB2023022020
SB2023030129
SB2023030337
and 55 more
#VU59549 - Improper Validation of Certificate with Host Mismatch
CVE-2021-44532
CWE-297 Medium
No
No
17-3 12.01.2022 SB2022011216
SB2022041522
SB2022042806
and 36 more


Showing elements 41 - 60 out of 96