Known vulnerabilities in nodejs (Red Hat package) - page 2

Vendor: Red Hat Inc.
Software: nodejs (Red Hat package)
Software CPE: cpe:2.3:o:red_hat:nodejs_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 44
Public exploits: 2
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting nodejs (Red Hat package) nodejs (Red Hat package) is affected by 44 known vulnerabilities: 4 high, 35 medium, 5 low Critical High Medium Low

Vulnerabilities (44)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU72557 - Memory corruption
CVE-2022-4904		 CWE-119 Low
No
No
 16.19.1-1.el9_2, 16.20.2-1.el9_0 24.02.2023 SB2023022410
SB2023022502
SB2023030233
and 38 more
#VU72404 - Incorrect Regular Expression
CVE-2023-24807		 CWE-185 Medium
No
No
 16.19.1-1.el9_2, 16.20.2-1.el9_0 20.02.2023 SB2023022022
SB2023022020
SB2023030129
and 34 more
#VU72403 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2023-23936		 CWE-113 Medium
No
No
 16.19.1-1.el9_2, 16.20.2-1.el9_0 20.02.2023 SB2023022022
SB2023022020
SB2023030129
and 35 more
#VU72400 - Permissions, Privileges, and Access Controls
CVE-2023-23920		 CWE-264 Low
No
No
 16.19.1-1.el9_2, 16.20.2-1.el9_0 20.02.2023 SB2023022020
SB2023030129
SB2023030337
and 55 more
#VU72398 - Permissions, Privileges, and Access Controls
CVE-2023-23918		 CWE-264 Medium
No
No
 16.19.1-1.el9_2 20.02.2023 SB2023022020
SB2023030129
SB2023030337
and 48 more
#VU69942 - Incorrect Regular Expression
CVE-2022-3517		 CWE-185 Medium
No
No
 16.18.1-3.el9_1 06.12.2022 SB2022120638
SB2022120639
SB2022120640
and 48 more
#VU69354 - Reliance on Reverse DNS Resolution for a Security-Critical Action
CVE-2022-43548		 CWE-350 Medium
No
No
 16.18.1-3.el9_1 15.11.2022 SB2022111599
SB20221115101
SB20221115102
and 47 more
#VU67850 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-35256		 CWE-444 Medium
No
No
 16.17.1-1.el9_0, 16.18.1-3.el9_1 03.10.2022 SB2022100347
SB2022100401
SB2022100402
and 50 more
#VU67849 - Use of Insufficiently Random Values
CVE-2022-35255		 CWE-330 Medium
No
No
 16.17.1-1.el9_0 03.10.2022 SB2022100401
SB2022100402
SB2022100528
and 40 more
#VU66955 - Improper Control of Generation of Code ('Code Injection')
CVE-2020-7788		 CWE-94 Medium
No
No
 16.16.0-1.el9_0 05.09.2022 SB2020121120
SB2022090501
SB2022091209
and 21 more
#VU66698 - Exposure of sensitive information to an unauthorized actor
CVE-2022-29244		 CWE-200 Medium
No
No
 16.16.0-1.el9_0 22.08.2022 SB2022082252
SB2022082253
SB2022091110
and 15 more
#VU66400 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2022-33987		 CWE-601 Medium
No
No
 16.16.0-1.el9_0 11.08.2022 SB2022081124
SB2022081525
SB2022090835
and 22 more
#VU65282 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-32215		 CWE-444 Medium
No
No
 16.16.0-1.el9_0 13.07.2022 SB2022071338
SB2022071610
SB2022071611
and 54 more
#VU65278 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-32214		 CWE-444 Medium
No
No
 16.16.0-1.el9_0 13.07.2022 SB2022071338
SB2022071610
SB2022071611
and 36 more
#VU65275 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-32213		 CWE-444 Medium
No
No
 16.16.0-1.el9_0 13.07.2022 SB2022071338
SB2022071610
SB2022071611
and 55 more
#VU65273 - Improper Check or Handling of Exceptional Conditions
CVE-2022-32212		 CWE-703 Medium
No
No
 16.16.0-1.el9_0 13.07.2022 SB2022071338
SB2022071610
SB2022071611
and 48 more
#VU64030 - Resource exhaustion
CVE-2021-44906		 CWE-400 High
No
No
 16.18.1-3.el9_1 07.06.2022 SB2022060836
SB2022062103
SB2022062203
and 52 more
#VU63698 - Incorrect Regular Expression
CVE-2021-33502		 CWE-185 Medium
No
No
 16.16.0-1.el9_0 26.05.2022 SB2021052416
SB2022052615
SB2022060618
and 17 more
#VU57967 - Improper input validation
CVE-2021-3807		 CWE-20 Medium
No
No
 16.16.0-1.el9_0 05.11.2021 SB2021110513
SB2021112603
SB2022042257
and 51 more
#VU52985 - Incorrect Regular Expression
CVE-2020-28469		 CWE-185 Medium
No
No
 16.16.0-1.el9_0 10.05.2021 SB2021051002
SB2021051004
SB2021072625
and 26 more


Showing elements 21 - 40 out of 44