Количество 52
Количество 52
RLSA-2021:3666
Important: nodejs:14 security and bug fix update
RLSA-2021:3623
Important: nodejs:12 security and bug fix update
ELSA-2021-3666
ELSA-2021-3666: nodejs:14 security and bug fix update (IMPORTANT)
ELSA-2021-3623
ELSA-2021-3623: nodejs:12 security and bug fix update (IMPORTANT)
openSUSE-SU-2021:2953-1
Security update for nodejs10
openSUSE-SU-2021:1239-1
Security update for nodejs10
SUSE-SU-2021:2953-1
Security update for nodejs10
SUSE-SU-2021:2823-1
Security update for nodejs10
openSUSE-SU-2021:3211-1
Security update for nodejs14
openSUSE-SU-2021:2875-1
Security update for nodejs12
openSUSE-SU-2021:1313-1
Security update for nodejs14
openSUSE-SU-2021:1214-1
Security update for nodejs12
SUSE-SU-2021:3211-1
Security update for nodejs14
SUSE-SU-2021:3184-1
Security update for nodejs14
SUSE-SU-2021:2875-1
Security update for nodejs12
SUSE-SU-2021:2824-1
Security update for nodejs12
CVE-2021-22931
Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to Remote Code Execution, XSS, Application crashes due to missing input validation of host names returned by Domain Name Servers in Node.js dns library which can lead to output of wrong hostnames (leading to Domain Hijacking) and injection vulnerabilities in applications using the library.
CVE-2021-22931
Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to Remote Code Execution, XSS, Application crashes due to missing input validation of host names returned by Domain Name Servers in Node.js dns library which can lead to output of wrong hostnames (leading to Domain Hijacking) and injection vulnerabilities in applications using the library.
CVE-2021-22931
Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to Remote Code Execution, XSS, Application crashes due to missing input validation of host names returned by Domain Name Servers in Node.js dns library which can lead to output of wrong hostnames (leading to Domain Hijacking) and injection vulnerabilities in applications using the library.
CVE-2021-22931
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | RLSA-2021:3666 Important: nodejs:14 security and bug fix update | почти 5 лет назад | ||
| RLSA-2021:3623 Important: nodejs:12 security and bug fix update | почти 5 лет назад | ||
| ELSA-2021-3666 ELSA-2021-3666: nodejs:14 security and bug fix update (IMPORTANT) | почти 5 лет назад | ||
| ELSA-2021-3623 ELSA-2021-3623: nodejs:12 security and bug fix update (IMPORTANT) | почти 5 лет назад | ||
 | openSUSE-SU-2021:2953-1 Security update for nodejs10 | почти 5 лет назад | ||
| openSUSE-SU-2021:1239-1 Security update for nodejs10 | почти 5 лет назад | ||
| SUSE-SU-2021:2953-1 Security update for nodejs10 | почти 5 лет назад | ||
| SUSE-SU-2021:2823-1 Security update for nodejs10 | почти 5 лет назад | ||
| openSUSE-SU-2021:3211-1 Security update for nodejs14 | почти 5 лет назад | ||
| openSUSE-SU-2021:2875-1 Security update for nodejs12 | почти 5 лет назад | ||
| openSUSE-SU-2021:1313-1 Security update for nodejs14 | почти 5 лет назад | ||
| openSUSE-SU-2021:1214-1 Security update for nodejs12 | почти 5 лет назад | ||
| SUSE-SU-2021:3211-1 Security update for nodejs14 | почти 5 лет назад | ||
| SUSE-SU-2021:3184-1 Security update for nodejs14 | почти 5 лет назад | ||
| SUSE-SU-2021:2875-1 Security update for nodejs12 | почти 5 лет назад | ||
| SUSE-SU-2021:2824-1 Security update for nodejs12 | почти 5 лет назад | ||
 | CVE-2021-22931 Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to Remote Code Execution, XSS, Application crashes due to missing input validation of host names returned by Domain Name Servers in Node.js dns library which can lead to output of wrong hostnames (leading to Domain Hijacking) and injection vulnerabilities in applications using the library. | CVSS3: 9.8 | 22% Средний | почти 5 лет назад |
 | CVE-2021-22931 Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to Remote Code Execution, XSS, Application crashes due to missing input validation of host names returned by Domain Name Servers in Node.js dns library which can lead to output of wrong hostnames (leading to Domain Hijacking) and injection vulnerabilities in applications using the library. | CVSS3: 5 | 22% Средний | почти 5 лет назад |
 | CVE-2021-22931 Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to Remote Code Execution, XSS, Application crashes due to missing input validation of host names returned by Domain Name Servers in Node.js dns library which can lead to output of wrong hostnames (leading to Domain Hijacking) and injection vulnerabilities in applications using the library. | CVSS3: 9.8 | 22% Средний | почти 5 лет назад |
 | CVSS3: 9.8 | 22% Средний | почти 5 лет назад |
Уязвимостей на страницу