Netapp

Nextgen Api

4 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2021-22930

  • EPSS 0.35%
  • Published 07.10.2021 14:15:08
  • Last modified 21.11.2024 05:50:56

Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to change process behavior.

9.8

CVE-2021-22931

Exploit
  • EPSS 0.74%
  • Published 16.08.2021 19:15:13
  • Last modified 21.11.2024 05:50:57

Node.js before 16.6.0, 14.17.4, and 12.22.4 is vulnerable to Remote Code Execution, XSS, Application crashes due to missing input validation of host names returned by Domain Name Servers in Node.js dns library which can lead to output of wrong hostna...

5.3

CVE-2021-22939

Exploit
  • EPSS 0.14%
  • Published 16.08.2021 19:15:13
  • Last modified 21.11.2024 05:50:58

If the Node.js https API was used incorrectly and "undefined" was in passed for the "rejectUnauthorized" parameter, no error was returned and connections to servers with an expired certificate would have been accepted.

7.5

CVE-2021-22940

  • EPSS 0.42%
  • Published 16.08.2021 19:15:13
  • Last modified 21.11.2024 05:50:58

Node.js before 16.6.1, 14.17.5, and 12.22.5 is vulnerable to a use after free attack where an attacker might be able to exploit the memory corruption, to change process behavior.