Known vulnerabilities in nodejs18-devel - page 3
Vendor:
SUSE
Software:
nodejs18-devel
Software CPE:
cpe:2.3:o:suse:nodejs18-devel:*:*:*:*:*:suse_linux:*:*
Website:
https://www.suse.com/
Total vulnerabilities:
84
Public exploits:
4
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.2
Breakdown by Severity Chart
18.20.8-8.44.1
18.20.8-150400.9.39.1
18.20.8-8.41.1
18.20.8-8.36.1
18.20.8-150400.9.36.1
18.20.6-8.33.1
18.20.6-150400.9.33.1
18.20.5-150400.9.30.1
18.20.5-8.30.1
18.20.4-8.27.2
18.20.4-150400.9.24.2
18.20.4-8.24.1
18.20.1-150400.9.21.3
18.20.1-8.21.1
18.19.1-150400.9.18.2
18.19.1-8.18.1
18.18.2-8.15.1
18.18.2-150400.9.15.1
18.17.1-150400.9.12.1
18.17.1-8.12.1
18.16.1-150400.9.9.1
18.16.1-8.9.1
18.14.2-150400.9.6.2
18.14.2-8.6.2
18.13.0-150400.9.3.1
18.13.0-8.3.1
Vulnerabilities (84)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU100921 - Incorrect Regular Expression CVE-2024-21538 |
CWE-185 | Medium | 18.20.5-8.30.1, 18.20.5-150400.9.30.1 | 26.11.2024 |
SB2024112627 SB2024112629 SB2024120325 and 67 more |
||
| #VU93880 - Server-Side Request Forgery (SSRF) CVE-2024-22020 |
CWE-918 | Medium | 18.20.4-8.24.1, 18.20.4-150400.9.24.2 | 09.07.2024 |
SB2024070937 SB2024071636 SB20240717119 and 30 more |
||
| #VU93879 - Command injection CVE-2024-36138 |
CWE-77 | Medium | 18.20.4-8.24.1, 18.20.4-150400.9.24.2 | 09.07.2024 |
SB2024070937 SB2024071636 SB20240717119 and 12 more |
||
| #VU88462 - Command injection CVE-2024-27980 |
CWE-77 | Medium | 18.20.4-8.24.1, 18.20.4-150400.9.24.2 | 11.04.2024 |
SB2024041122 SB2024041155 SB2024041156 and 20 more |
||
| #VU88178 - Insufficient Verification of Data Authenticity CVE-2024-30261 |
CWE-345 | Medium | 18.20.1-8.21.1, 18.20.1-150400.9.21.3 | 05.04.2024 |
SB2024040527 SB2024041611 SB2024041618 and 12 more |
||
| #VU88177 - Exposure of sensitive information to an unauthorized actor CVE-2024-30260 |
CWE-200 | Low | 18.20.1-8.21.1, 18.20.1-150400.9.21.3 | 05.04.2024 |
SB2024040527 SB2024041611 SB2024041618 and 11 more |
||
| #VU88176 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2024-27982 |
CWE-444 | Medium | 18.20.1-8.21.1, 18.20.1-150400.9.21.3 | 05.04.2024 |
SB2024040526 SB2024040851 SB2024040852 and 53 more |
||
| #VU88175 - Reachable Assertion CVE-2024-27983 |
CWE-617 | Medium | 18.20.1-8.21.1, 18.20.1-150400.9.21.3 | 05.04.2024 |
SB2024040526 SB2024040851 SB2024040852 and 56 more |
||
| #VU86733 - Improper input validation CVE-2024-22025 |
CWE-20 | Medium | 18.19.1-8.18.1, 18.19.1-150400.9.18.2 | 22.02.2024 |
SB2024022225 SB2024022226 SB2024022832 and 34 more |
||
| #VU86724 - Covert Timing Channel CVE-2023-46809 |
CWE-385 | Medium | 18.19.1-8.18.1, 18.19.1-150400.9.18.2 | 22.02.2024 |
SB2024022225 SB2024022226 SB2024022832 and 35 more |
||
| #VU86721 - Improper input validation CVE-2024-22019 |
CWE-20 | Medium | 18.19.1-8.18.1, 18.19.1-150400.9.18.2 | 22.02.2024 |
SB2024022225 SB2024022226 SB2024022832 and 48 more |
||
| #VU86718 - Improper Handling of Exceptional Conditions CVE-2024-21892 |
CWE-755 | Low | 18.19.1-8.18.1, 18.19.1-150400.9.18.2 | 22.02.2024 |
SB2024022225 SB2024022226 SB2024022832 and 30 more |
||
| #VU86709 - Exposure of sensitive information to an unauthorized actor CVE-2024-24758 |
CWE-200 | Low | 18.19.1-8.18.1, 18.19.1-150400.9.18.2 | 22.02.2024 |
SB2024022211 SB2024022225 SB2024022832 and 13 more |
||
| #VU86707 - Server-Side Request Forgery (SSRF) CVE-2024-24806 |
CWE-918 | Medium | 18.19.1-8.18.1, 18.19.1-150400.9.18.2, 18.20.1-8.21.1, 18.20.1-150400.9.21.3 | 22.02.2024 |
SB2024022210 SB2024022214 SB2024022225 and 54 more |
||
| #VU82070 - Improper Control of Generation of Code ('Code Injection') CVE-2023-39333 |
CWE-94 | Low | 18.18.2-8.15.1, 18.18.2-150400.9.15.1 | 17.10.2023 |
SB2023101703 SB2023101801 SB2023101802 and 28 more |
||
| #VU82069 - Improper Validation of Integrity Check Value CVE-2023-38552 |
CWE-354 | Medium | 18.18.2-8.15.1, 18.18.2-150400.9.15.1 | 17.10.2023 |
SB2023101703 SB2023101801 SB2023101802 and 34 more |
||
| #VU82066 - Exposure of sensitive information to an unauthorized actor CVE-2023-45143 |
CWE-200 | Medium | 18.18.2-8.15.1, 18.18.2-150400.9.15.1 | 17.10.2023 |
SB2023101702 SB2023101703 SB2023101801 and 31 more |
||
| #VU81728 - Resource exhaustion CVE-2023-44487 |
CWE-400 | High | 18.18.2-8.15.1, 18.18.2-150400.9.15.1 | 10.10.2023 |
SB2023101023 SB2023101024 SB2023101037 and 652 more |
||
| #VU79334 - Permissions, Privileges, and Access Controls CVE-2023-32006 |
CWE-264 | Medium | 18.17.1-8.12.1, 18.17.1-150400.9.12.1 | 10.08.2023 |
SB2023081012 SB2023081443 SB2023081705 and 38 more |
||
| #VU79332 - Permissions, Privileges, and Access Controls CVE-2023-32002 |
CWE-264 | Medium | 18.17.1-8.12.1, 18.17.1-150400.9.12.1 | 10.08.2023 |
SB2023081012 SB2023081443 SB2023081705 and 44 more |
Showing elements 41 - 60 out of 84