Known vulnerabilities in nodejs16-devel - page 4

Vendor: SUSE
Software: nodejs16-devel
Software CPE: cpe:2.3:o:suse:nodejs16-devel:*:*:*:*:*:suse_linux:*:*
Website: https://www.suse.com/
Total vulnerabilities: 74
Public exploits: 3
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting nodejs16-devel nodejs16-devel is affected by 74 known vulnerabilities: 3 high, 59 medium, 12 low Critical High Medium Low

Vulnerabilities (74)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU72404 - Incorrect Regular Expression
CVE-2023-24807		 CWE-185 Medium
No
No
 16.19.1-8.24.1, 16.19.1-150300.7.18.1, 16.19.1-150400.3.15.1 20.02.2023 SB2023022022
SB2023022020
SB2023030129
and 34 more
#VU72403 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2023-23936		 CWE-113 Medium
No
No
 16.19.1-8.24.1, 16.19.1-150300.7.18.1, 16.19.1-150400.3.15.1 20.02.2023 SB2023022022
SB2023022020
SB2023030129
and 35 more
#VU72400 - Permissions, Privileges, and Access Controls
CVE-2023-23920		 CWE-264 Low
No
No
 16.19.1-8.24.1, 16.19.1-150300.7.18.1, 16.19.1-150400.3.15.1 20.02.2023 SB2023022020
SB2023030129
SB2023030337
and 55 more
#VU69354 - Reliance on Reverse DNS Resolution for a Security-Critical Action
CVE-2022-43548		 CWE-350 Medium
No
No
 16.18.1-8.17.1, 16.18.1-150300.7.15.1, 16.18.1-150400.3.12.1 15.11.2022 SB2022111599
SB20221115101
SB20221115102
and 47 more
#VU67850 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-35256		 CWE-444 Medium
No
No
 16.17.1-8.12.1, 16.17.1-150300.7.12.1, 16.17.1-150400.3.9.1 03.10.2022 SB2022100347
SB2022100401
SB2022100402
and 50 more
#VU67849 - Use of Insufficiently Random Values
CVE-2022-35255		 CWE-330 Medium
No
No
 16.17.1-8.12.1, 16.17.1-150300.7.12.1, 16.17.1-150400.3.9.1 03.10.2022 SB2022100401
SB2022100402
SB2022100528
and 40 more
#VU67166 - Server-Side Request Forgery (SSRF)
CVE-2022-35949		 CWE-918 Medium
No
No
 16.17.0-8.9.1, 16.17.0-150300.7.9.1, 16.17.0-150400.3.6.1 11.09.2022 SB2022091109
SB2022091110
SB2022091217
and 4 more
#VU67164 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2022-35948		 CWE-93 Medium
No
No
 16.17.0-8.9.1, 16.17.0-150300.7.9.1, 16.17.0-150400.3.6.1 11.09.2022 SB2022091109
SB2022091110
SB2022091217
and 8 more
#VU67163 - Improper Neutralization of CRLF Sequences ('CRLF Injection')
CVE-2022-31150		 CWE-93 Medium
No
No
 16.17.0-8.9.1, 16.17.0-150300.7.9.1, 16.17.0-150400.3.6.1 11.09.2022 SB2022091108
SB2022091110
SB2022091217
and 2 more
#VU66698 - Exposure of sensitive information to an unauthorized actor
CVE-2022-29244		 CWE-200 Medium
No
No
 16.17.0-8.9.1, 16.17.0-150300.7.9.1, 16.17.0-150400.3.6.1 22.08.2022 SB2022082252
SB2022082253
SB2022091110
and 15 more
#VU65282 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-32215		 CWE-444 Medium
No
No
 16.16.0-8.6.1, 16.16.0-150300.7.6.2, 16.16.0-150400.3.3.2, 16.17.1-8.12.1, 16.17.1-150300.7.12.1, 16.17.1-150400.3.9.1 13.07.2022 SB2022071338
SB2022071610
SB2022071611
and 54 more
#VU65278 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-32214		 CWE-444 Medium
No
No
 16.16.0-8.6.1, 16.16.0-150300.7.6.2, 16.16.0-150400.3.3.2 13.07.2022 SB2022071338
SB2022071610
SB2022071611
and 36 more
#VU65275 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-32213		 CWE-444 Medium
No
No
 16.16.0-8.6.1, 16.16.0-150300.7.6.2, 16.16.0-150400.3.3.2, 16.17.1-8.12.1, 16.17.1-150300.7.12.1, 16.17.1-150400.3.9.1 13.07.2022 SB2022071338
SB2022071610
SB2022071611
and 55 more
#VU65273 - Improper Check or Handling of Exceptional Conditions
CVE-2022-32212		 CWE-703 Medium
No
No
 16.16.0-8.6.1, 16.16.0-150300.7.6.2, 16.16.0-150400.3.3.2 13.07.2022 SB2022071338
SB2022071610
SB2022071611
and 48 more


Showing elements 61 - 80 out of 74