Known vulnerabilities in npm18 - page 4
Vendor:
SUSE
Software:
npm18
Software CPE:
cpe:2.3:o:suse:npm18:*:*:*:*:*:suse_linux:*:*
Website:
https://www.suse.com/
Total vulnerabilities:
84
Public exploits:
4
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.2
Breakdown by Severity Chart
18.20.8-8.44.1
18.20.8-150400.9.39.1
18.20.8-8.41.1
18.20.8-8.36.1
18.20.8-150400.9.36.1
18.20.6-8.33.1
18.20.6-150400.9.33.1
18.20.5-150400.9.30.1
18.20.5-8.30.1
18.20.4-8.27.2
18.20.4-150400.9.24.2
18.20.4-8.24.1
18.20.1-150400.9.21.3
18.20.1-8.21.1
18.19.1-150400.9.18.2
18.19.1-8.18.1
18.18.2-8.15.1
18.18.2-150400.9.15.1
18.17.1-150400.9.12.1
18.17.1-8.12.1
18.16.1-150400.9.9.1
18.16.1-8.9.1
18.14.2-150400.9.6.2
18.14.2-8.6.2
18.13.0-150400.9.3.1
18.13.0-8.3.1
Vulnerabilities (84)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU79335 - Permissions, Privileges, and Access Controls CVE-2023-32559 |
CWE-264 | Medium | 18.17.1-8.12.1, 18.17.1-150400.9.12.1 | 10.08.2023 |
SB2023081012 SB2023081443 SB2023081705 and 39 more |
||
| #VU77606 - Inconsistency Between Implementation and Documented Design CVE-2023-30590 |
CWE-1068 | Medium | 18.16.1-8.9.1, 18.16.1-150400.9.9.1 | 21.06.2023 |
SB2023062144 SB2023062727 SB2023062743 and 33 more |
||
| #VU77605 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2023-30589 |
CWE-444 | Medium | 18.16.1-8.9.1, 18.16.1-150400.9.9.1, 18.17.1-8.12.1 | 21.06.2023 |
SB2023062144 SB2023062727 SB2023062743 and 43 more |
||
| #VU77604 - Improper input validation CVE-2023-30588 |
CWE-20 | Medium | 18.16.1-8.9.1, 18.16.1-150400.9.9.1 | 21.06.2023 |
SB2023062144 SB2023062727 SB2023062743 and 33 more |
||
| #VU77601 - Untrusted Search Path CVE-2023-30585 |
CWE-426 | Low | 18.16.1-8.9.1, 18.16.1-150400.9.9.1 | 21.06.2023 |
SB2023062144 SB2023062727 SB2023062743 and 13 more |
||
| #VU77586 - Permissions, Privileges, and Access Controls CVE-2023-30581 |
CWE-264 | Medium | 18.16.1-8.9.1, 18.16.1-150400.9.9.1 | 21.06.2023 |
SB2023062144 SB2023062727 SB2023062743 and 31 more |
||
| #VU76426 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) CVE-2023-31147 |
CWE-338 | Medium | 18.16.1-8.9.1, 18.16.1-150400.9.9.1 | 23.05.2023 |
SB2023052309 SB2023052312 SB2023053021 and 39 more |
||
| #VU76425 - Buffer Underwrite ('Buffer Underflow') CVE-2023-31130 |
CWE-124 | Low | 18.16.1-8.9.1, 18.16.1-150400.9.9.1 | 23.05.2023 |
SB2023052309 SB2023052312 SB2023053021 and 55 more |
||
| #VU76424 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) CVE-2023-31124 |
CWE-338 | Medium | 18.16.1-8.9.1, 18.16.1-150400.9.9.1 | 23.05.2023 |
SB2023052309 SB2023052312 SB2023053021 and 33 more |
||
| #VU76423 - Improper input validation CVE-2023-32067 |
CWE-20 | Medium | 18.16.1-8.9.1, 18.16.1-150400.9.9.1 | 23.05.2023 |
SB2023052312 SB2023053021 SB2023060711 and 35 more |
||
| #VU76422 - Improper input validation CVE-2023-32067 |
CWE-20 | Medium | 18.16.1-8.9.1, 18.16.1-150400.9.9.1 | 23.05.2023 |
SB2023052309 SB2023052312 SB2023053021 and 66 more |
||
| #VU72750 - Inefficient Algorithmic Complexity CVE-2022-25881 |
CWE-407 | Medium | 18.16.1-8.9.1, 18.16.1-150400.9.9.1 | 03.03.2023 |
SB2023030326 SB2023030328 SB2023031112 and 61 more |
||
| #VU72404 - Incorrect Regular Expression CVE-2023-24807 |
CWE-185 | Medium | 18.14.2-8.6.2, 18.14.2-150400.9.6.2 | 20.02.2023 |
SB2023022022 SB2023022020 SB2023030129 and 34 more |
||
| #VU72403 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting') CVE-2023-23936 |
CWE-113 | Medium | 18.14.2-8.6.2, 18.14.2-150400.9.6.2 | 20.02.2023 |
SB2023022022 SB2023022020 SB2023030129 and 35 more |
||
| #VU72400 - Permissions, Privileges, and Access Controls CVE-2023-23920 |
CWE-264 | Low | 18.14.2-8.6.2, 18.14.2-150400.9.6.2 | 20.02.2023 |
SB2023022020 SB2023030129 SB2023030337 and 55 more |
||
| #VU72399 - Resource Management Errors CVE-2023-23919 |
CWE-399 | Medium | 18.14.2-8.6.2, 18.14.2-150400.9.6.2 | 20.02.2023 |
SB2023022020 SB2023030129 SB2023030337 and 33 more |
||
| #VU72398 - Permissions, Privileges, and Access Controls CVE-2023-23918 |
CWE-264 | Medium | 18.14.2-8.6.2, 18.14.2-150400.9.6.2 | 20.02.2023 |
SB2023022020 SB2023030129 SB2023030337 and 48 more |
||
| #VU65282 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2022-32215 |
CWE-444 | Medium | 18.13.0-8.3.1, 18.13.0-150400.9.3.1 | 13.07.2022 |
SB2022071338 SB2022071610 SB2022071611 and 54 more |
||
| #VU65275 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2022-32213 |
CWE-444 | Medium | 18.13.0-8.3.1, 18.13.0-150400.9.3.1 | 13.07.2022 |
SB2022071338 SB2022071610 SB2022071611 and 55 more |
||
| #VU65273 - Improper Check or Handling of Exceptional Conditions CVE-2022-32212 |
CWE-703 | Medium | 18.13.0-8.3.1, 18.13.0-150400.9.3.1 | 13.07.2022 |
SB2022071338 SB2022071610 SB2022071611 and 48 more |
Showing elements 61 - 80 out of 84