Known vulnerabilities in nodejs16 - page 3
Vendor:
SUSE
Software:
nodejs16
Software CPE:
cpe:2.3:o:suse:nodejs16:*:*:*:*:*:suse_linux:*:*
Website:
https://www.suse.com/
Total vulnerabilities:
74
Public exploits:
3
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.2
Breakdown by Severity Chart
16.20.2-150400.3.42.1
16.20.2-150400.3.36.1
16.20.2-8.45.1
16.20.2-150400.3.33.1
16.20.2-150300.7.36.2
16.20.2-8.42.1
16.20.2-150400.3.30.1
16.20.2-150300.7.33.1
16.20.2-8.39.1
16.20.2-150300.7.30.1
16.20.2-150400.3.27.2
16.20.2-8.36.1
16.20.2-150300.7.27.2
16.20.2-150400.3.24.1
16.20.2-8.33.1
16.20.1-150300.7.24.2
16.20.1-150400.3.21.1
16.20.1-8.30.1
16.20.0-8.27.1
16.20.0-150300.7.21.2
16.20.0-150400.3.18.2
16.19.1-150300.7.18.1
16.19.1-150400.3.15.1
16.19.1-8.24.1
16.18.1-150300.7.15.1
16.18.1-150400.3.12.1
16.18.1-8.17.1
16.17.1-150400.3.9.1
16.17.1-150300.7.12.1
16.17.1-8.12.1
16.17.0-150300.7.9.1
16.17.0-150400.3.6.1
16.17.0-8.9.1
16.16.0-150300.7.6.2
16.16.0-150400.3.3.2
16.16.0-8.6.1
Vulnerabilities (74)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU82070 - Improper Control of Generation of Code ('Code Injection') CVE-2023-39333 |
CWE-94 | Low | 16.20.2-8.36.1, 16.20.2-150300.7.30.1, 16.20.2-150400.3.27.2 | 17.10.2023 |
SB2023101703 SB2023101801 SB2023101802 and 28 more |
||
| #VU82069 - Improper Validation of Integrity Check Value CVE-2023-38552 |
CWE-354 | Medium | 16.20.2-8.36.1, 16.20.2-150300.7.30.1, 16.20.2-150400.3.27.2 | 17.10.2023 |
SB2023101703 SB2023101801 SB2023101802 and 34 more |
||
| #VU82066 - Exposure of sensitive information to an unauthorized actor CVE-2023-45143 |
CWE-200 | Medium | 16.20.2-8.36.1, 16.20.2-150300.7.30.1, 16.20.2-150400.3.27.2 | 17.10.2023 |
SB2023101702 SB2023101703 SB2023101801 and 31 more |
||
| #VU81728 - Resource exhaustion CVE-2023-44487 |
CWE-400 | High | 16.20.2-8.36.1, 16.20.2-150300.7.30.1, 16.20.2-150400.3.27.2 | 10.10.2023 |
SB2023101023 SB2023101024 SB2023101037 and 652 more |
||
| #VU79335 - Permissions, Privileges, and Access Controls CVE-2023-32559 |
CWE-264 | Medium | 16.20.2-8.33.1, 16.20.2-150300.7.27.2, 16.20.2-150400.3.24.1 | 10.08.2023 |
SB2023081012 SB2023081443 SB2023081705 and 39 more |
||
| #VU79334 - Permissions, Privileges, and Access Controls CVE-2023-32006 |
CWE-264 | Medium | 16.20.2-8.33.1, 16.20.2-150300.7.27.2, 16.20.2-150400.3.24.1 | 10.08.2023 |
SB2023081012 SB2023081443 SB2023081705 and 38 more |
||
| #VU79332 - Permissions, Privileges, and Access Controls CVE-2023-32002 |
CWE-264 | Medium | 16.20.2-8.33.1, 16.20.2-150300.7.27.2, 16.20.2-150400.3.24.1 | 10.08.2023 |
SB2023081012 SB2023081443 SB2023081705 and 44 more |
||
| #VU77606 - Inconsistency Between Implementation and Documented Design CVE-2023-30590 |
CWE-1068 | Medium | 16.20.1-8.30.1, 16.20.1-150300.7.24.2, 16.20.1-150400.3.21.1 | 21.06.2023 |
SB2023062144 SB2023062727 SB2023062743 and 33 more |
||
| #VU77605 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2023-30589 |
CWE-444 | Medium | 16.20.1-8.30.1, 16.20.1-150300.7.24.2, 16.20.1-150400.3.21.1 | 21.06.2023 |
SB2023062144 SB2023062727 SB2023062743 and 43 more |
||
| #VU77604 - Improper input validation CVE-2023-30588 |
CWE-20 | Medium | 16.20.1-8.30.1, 16.20.1-150300.7.24.2, 16.20.1-150400.3.21.1 | 21.06.2023 |
SB2023062144 SB2023062727 SB2023062743 and 33 more |
||
| #VU77601 - Untrusted Search Path CVE-2023-30585 |
CWE-426 | Low | 16.20.1-8.30.1, 16.20.1-150300.7.24.2, 16.20.1-150400.3.21.1 | 21.06.2023 |
SB2023062144 SB2023062727 SB2023062743 and 13 more |
||
| #VU77586 - Permissions, Privileges, and Access Controls CVE-2023-30581 |
CWE-264 | Medium | 16.20.1-8.30.1, 16.20.1-150300.7.24.2, 16.20.1-150400.3.21.1 | 21.06.2023 |
SB2023062144 SB2023062727 SB2023062743 and 31 more |
||
| #VU76426 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) CVE-2023-31147 |
CWE-338 | Medium | 16.20.1-8.30.1, 16.20.1-150300.7.24.2, 16.20.1-150400.3.21.1 | 23.05.2023 |
SB2023052309 SB2023052312 SB2023053021 and 39 more |
||
| #VU76425 - Buffer Underwrite ('Buffer Underflow') CVE-2023-31130 |
CWE-124 | Low | 16.20.1-8.30.1, 16.20.1-150300.7.24.2, 16.20.1-150400.3.21.1 | 23.05.2023 |
SB2023052309 SB2023052312 SB2023053021 and 55 more |
||
| #VU76424 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) CVE-2023-31124 |
CWE-338 | Medium | 16.20.1-8.30.1, 16.20.1-150300.7.24.2, 16.20.1-150400.3.21.1 | 23.05.2023 |
SB2023052309 SB2023052312 SB2023053021 and 33 more |
||
| #VU76423 - Improper input validation CVE-2023-32067 |
CWE-20 | Medium | 16.20.1-8.30.1, 16.20.1-150300.7.24.2, 16.20.1-150400.3.21.1 | 23.05.2023 |
SB2023052312 SB2023053021 SB2023060711 and 35 more |
||
| #VU76422 - Improper input validation CVE-2023-32067 |
CWE-20 | Medium | 16.20.1-8.30.1, 16.20.1-150300.7.24.2, 16.20.1-150400.3.21.1 | 23.05.2023 |
SB2023052309 SB2023052312 SB2023053021 and 66 more |
||
| #VU72750 - Inefficient Algorithmic Complexity CVE-2022-25881 |
CWE-407 | Medium | 16.20.0-8.27.1, 16.20.0-150300.7.21.2, 16.20.0-150400.3.18.2 | 03.03.2023 |
SB2023030326 SB2023030328 SB2023031112 and 61 more |
||
| #VU72399 - Resource Management Errors CVE-2023-23919 |
CWE-399 | Medium | 16.19.1-8.24.1, 16.19.1-150300.7.18.1, 16.19.1-150400.3.15.1 | 20.02.2023 |
SB2023022020 SB2023030129 SB2023030337 and 33 more |
||
| #VU72398 - Permissions, Privileges, and Access Controls CVE-2023-23918 |
CWE-264 | Medium | 16.19.1-8.24.1, 16.19.1-150300.7.18.1, 16.19.1-150400.3.15.1 | 20.02.2023 |
SB2023022020 SB2023030129 SB2023030337 and 48 more |
Showing elements 41 - 60 out of 74