Known vulnerabilities in nodejs16 - page 4
Vendor:
SUSE
Software:
nodejs16
Software CPE:
cpe:2.3:o:suse:nodejs16:*:*:*:*:*:suse_linux:*:*
Website:
https://www.suse.com/
Total vulnerabilities:
74
Public exploits:
3
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.2
Breakdown by Severity Chart
16.20.2-150400.3.42.1
16.20.2-150400.3.36.1
16.20.2-8.45.1
16.20.2-150400.3.33.1
16.20.2-150300.7.36.2
16.20.2-8.42.1
16.20.2-150400.3.30.1
16.20.2-150300.7.33.1
16.20.2-8.39.1
16.20.2-150300.7.30.1
16.20.2-150400.3.27.2
16.20.2-8.36.1
16.20.2-150300.7.27.2
16.20.2-150400.3.24.1
16.20.2-8.33.1
16.20.1-150300.7.24.2
16.20.1-150400.3.21.1
16.20.1-8.30.1
16.20.0-8.27.1
16.20.0-150300.7.21.2
16.20.0-150400.3.18.2
16.19.1-150300.7.18.1
16.19.1-150400.3.15.1
16.19.1-8.24.1
16.18.1-150300.7.15.1
16.18.1-150400.3.12.1
16.18.1-8.17.1
16.17.1-150400.3.9.1
16.17.1-150300.7.12.1
16.17.1-8.12.1
16.17.0-150300.7.9.1
16.17.0-150400.3.6.1
16.17.0-8.9.1
16.16.0-150300.7.6.2
16.16.0-150400.3.3.2
16.16.0-8.6.1
Vulnerabilities (74)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU72404 - Incorrect Regular Expression CVE-2023-24807 |
CWE-185 | Medium | 16.19.1-8.24.1, 16.19.1-150300.7.18.1, 16.19.1-150400.3.15.1 | 20.02.2023 |
SB2023022022 SB2023022020 SB2023030129 and 34 more |
||
| #VU72403 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') CVE-2023-23936 |
CWE-113 | Medium | 16.19.1-8.24.1, 16.19.1-150300.7.18.1, 16.19.1-150400.3.15.1 | 20.02.2023 |
SB2023022022 SB2023022020 SB2023030129 and 35 more |
||
| #VU72400 - Permissions, Privileges, and Access Controls CVE-2023-23920 |
CWE-264 | Low | 16.19.1-8.24.1, 16.19.1-150300.7.18.1, 16.19.1-150400.3.15.1 | 20.02.2023 |
SB2023022020 SB2023030129 SB2023030337 and 55 more |
||
| #VU69354 - Reliance on Reverse DNS Resolution for a Security-Critical Action CVE-2022-43548 |
CWE-350 | Medium | 16.18.1-8.17.1, 16.18.1-150300.7.15.1, 16.18.1-150400.3.12.1 | 15.11.2022 |
SB2022111599 SB20221115101 SB20221115102 and 47 more |
||
| #VU67850 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2022-35256 |
CWE-444 | Medium | 16.17.1-8.12.1, 16.17.1-150300.7.12.1, 16.17.1-150400.3.9.1 | 03.10.2022 |
SB2022100347 SB2022100401 SB2022100402 and 50 more |
||
| #VU67849 - Use of Insufficiently Random Values CVE-2022-35255 |
CWE-330 | Medium | 16.17.1-8.12.1, 16.17.1-150300.7.12.1, 16.17.1-150400.3.9.1 | 03.10.2022 |
SB2022100401 SB2022100402 SB2022100528 and 40 more |
||
| #VU67166 - Server-Side Request Forgery (SSRF) CVE-2022-35949 |
CWE-918 | Medium | 16.17.0-8.9.1, 16.17.0-150300.7.9.1, 16.17.0-150400.3.6.1 | 11.09.2022 |
SB2022091109 SB2022091110 SB2022091217 and 4 more |
||
| #VU67164 - Improper Neutralization of CRLF Sequences ('CRLF Injection') CVE-2022-35948 |
CWE-93 | Medium | 16.17.0-8.9.1, 16.17.0-150300.7.9.1, 16.17.0-150400.3.6.1 | 11.09.2022 |
SB2022091109 SB2022091110 SB2022091217 and 8 more |
||
| #VU67163 - Improper Neutralization of CRLF Sequences ('CRLF Injection') CVE-2022-31150 |
CWE-93 | Medium | 16.17.0-8.9.1, 16.17.0-150300.7.9.1, 16.17.0-150400.3.6.1 | 11.09.2022 |
SB2022091108 SB2022091110 SB2022091217 and 2 more |
||
| #VU66698 - Exposure of sensitive information to an unauthorized actor CVE-2022-29244 |
CWE-200 | Medium | 16.17.0-8.9.1, 16.17.0-150300.7.9.1, 16.17.0-150400.3.6.1 | 22.08.2022 |
SB2022082252 SB2022082253 SB2022091110 and 15 more |
||
| #VU65282 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2022-32215 |
CWE-444 | Medium | 16.16.0-8.6.1, 16.16.0-150300.7.6.2, 16.16.0-150400.3.3.2, 16.17.1-8.12.1, 16.17.1-150300.7.12.1, 16.17.1-150400.3.9.1 | 13.07.2022 |
SB2022071338 SB2022071610 SB2022071611 and 54 more |
||
| #VU65278 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2022-32214 |
CWE-444 | Medium | 16.16.0-8.6.1, 16.16.0-150300.7.6.2, 16.16.0-150400.3.3.2 | 13.07.2022 |
SB2022071338 SB2022071610 SB2022071611 and 36 more |
||
| #VU65275 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2022-32213 |
CWE-444 | Medium | 16.16.0-8.6.1, 16.16.0-150300.7.6.2, 16.16.0-150400.3.3.2, 16.17.1-8.12.1, 16.17.1-150300.7.12.1, 16.17.1-150400.3.9.1 | 13.07.2022 |
SB2022071338 SB2022071610 SB2022071611 and 55 more |
||
| #VU65273 - Improper Check or Handling of Exceptional Conditions CVE-2022-32212 |
CWE-703 | Medium | 16.16.0-8.6.1, 16.16.0-150300.7.6.2, 16.16.0-150400.3.3.2 | 13.07.2022 |
SB2022071338 SB2022071610 SB2022071611 and 48 more |
Showing elements 61 - 80 out of 74