Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
photonPhotonPHSA-2024-5.0-0318
HistoryJul 16, 2024 - 12:00 a.m.

Important Photon OS Security Update - PHSA-2024-5.0-0318

2024-07-1600:00:00
github.com
7
photon os
security update
nodejs packages

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

10

Confidence

High

EPSS

0.001

Percentile

43.5%

JSON

Updates of [‘nodejs’] packages of Photon OS have been released.

Related

nessus 21
nodejsblog 1
mageia 1
f5 1
openvas 5
almalinux 4
rocky 4
oraclelinux 4
redhat 4
osv 24
photon 74
ibm 3
vulnrichment 4
alpinelinux 5
ubuntucve 5
debiancve 5
hackerone 5
cvelist 5
redhatcve 3
cve 5
nvd 5
redos 1
wolfi 2
vmware 2
hivepro 1
prion 1
zdt 2
exploitdb 1
packetstorm 1
nessus
nessus
Photon OS 5.0: Nodejs PHSA-2024-5.0-0318
2024-07-24 00:00:00
SUSE SLES15 / openSUSE 15 Security Update : nodejs20 (SUSE-SU-2024:2543-1)
2024-07-18 00:00:00
SUSE SLES15 / openSUSE 15 Security Update : nodejs20 (SUSE-SU-2024:2574-1)
2024-07-23 00:00:00
nodejsblog
nodejsblog
Monday, July 8, 2024 Security Releases
2024-07-08 00:00:00
mageia
mageia
Updated nodejs & yarnpkg packages fix security vulnerabilities
2024-08-28 20:11:44
f5
f5
K000141047: Multiple Node.js vulnerabilities
2024-09-12 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2024-0282)
2024-08-29 00:00:00
Node.js 20.x < 20.15.1, 21.x < 22.4.1 Multiple Vulnerabilities - Windows
2024-07-09 00:00:00
Node.js 20.x < 20.15.1, 21.x < 22.4.1 Multiple Vulnerabilities - Mac OS X
2024-07-09 00:00:00
almalinux
almalinux
Moderate: nodejs:20 security update
2024-08-26 00:00:00
Moderate: nodejs:20 security update
2024-08-26 00:00:00
Moderate: nodejs:18 security update
2024-09-03 00:00:00
rocky
rocky
nodejs:20 security update
2024-09-17 00:55:59
nodejs:20 security update
2024-09-17 00:54:54
nodejs:18 security update
2024-09-17 00:54:54
oraclelinux
oraclelinux
nodejs:20 security update
2024-08-26 00:00:00
nodejs:20 security update
2024-08-26 00:00:00
nodejs:18 security update
2024-09-04 00:00:00
redhat
redhat
(RHSA-2024:5815) Moderate: nodejs:20 security update
2024-08-26 07:11:46
(RHSA-2024:5814) Moderate: nodejs:20 security update
2024-08-26 07:11:09
(RHSA-2024:6148) Moderate: nodejs:18 security update
2024-09-03 01:09:29
osv
osv
Moderate: nodejs:20 security update
2024-08-26 00:00:00
Moderate: nodejs:20 security update
2024-09-17 00:55:59
Moderate: nodejs:20 security update
2024-09-17 00:54:54
photon
photon
Important Photon OS Security Update - PHSA-2024-4.0-0653
2024-07-16 00:00:00
Critical Photon OS Security Update - PHSA-2023-5.0-0143
2023-11-15 00:00:00
Critical Photon OS Security Update - PHSA-2023-4.0-0512
2023-11-15 00:00:00
ibm
ibm
Security Bulletin: Node.js vulnerabilities affect IBM Spectrum Control
2024-09-17 08:40:51
Security Bulletin: A vulnerability in Node.js affects IBM Rational® Application Developer for WebSphere® Software (CVE-2024-36138)
2024-08-19 16:35:19
Security Bulletin: Vulnerabilities in Node.js and packages affect IBM Voice Gateway
2024-09-17 21:51:40
vulnrichment
vulnrichment
CVE-2024-36137
2024-09-07 16:00:35
CVE-2024-22020
2024-07-09 01:07:28
CVE-2024-22018
2024-07-10 01:00:12
alpinelinux
alpinelinux
CVE-2024-37372
2024-07-09 03:07:00
CVE-2024-36137
2024-09-07 16:15:02
CVE-2024-22018
2024-07-10 02:15:03
ubuntucve
ubuntucve
CVE-2024-37372
2024-07-11 00:00:00
CVE-2024-36138
2024-07-11 00:00:00
CVE-2024-36137
2024-07-11 00:00:00
debiancve
debiancve
CVE-2024-37372
2024-07-09 03:07:00
CVE-2024-22018
2024-07-10 02:15:03
CVE-2024-36137
2024-09-07 16:15:02
hackerone
hackerone
Node.js: Permission model improperly processes UNC paths
2023-07-21 16:34:42
Node.js: fs.fchown/fchmod bypasses permission model
2024-04-19 19:48:07
Node.js: fs.lstat bypasses permission model
2023-09-12 18:46:00
cvelist
cvelist
CVE-2024-36137
2024-09-07 16:00:35
CVE-2024-22018
2024-07-10 01:00:12
CVE-2024-22020
2024-07-09 01:07:28
redhatcve
redhatcve
CVE-2024-36137
2024-07-22 16:36:06
CVE-2024-22018
2024-07-10 03:49:27
CVE-2024-22020
2024-07-09 05:09:34
cve
cve
CVE-2024-36137
2024-09-07 16:15:02
CVE-2024-22018
2024-07-10 02:15:03
CVE-2024-22020
2024-07-09 02:15:09
nvd
nvd
CVE-2024-36137
2024-09-07 16:15:02
CVE-2024-22018
2024-07-10 02:15:03
CVE-2024-22020
2024-07-09 02:15:09
redos
redos
ROS-20240904-05
2024-09-04 00:00:00
wolfi
wolfi
CVE-2024-22020 vulnerabilities
2024-09-18 21:11:55
CVE-2024-22018 vulnerabilities
2024-09-18 21:11:55
vmware
vmware
VMware Cloud Director Appliance contains an authentication bypass vulnerability (CVE-2023-34060).
2023-11-14 00:00:00
VMware Cloud Director Appliance contains an authentication bypass vulnerability (CVE-2023-34060).
2023-11-14 00:00:00
hivepro
hivepro
VMware Unveils Critical Authentication Bypass Vulnerability in VCD Appliance
2023-11-17 08:07:39
prion
prion
Authentication flaw
2023-11-14 21:15:00
zdt
zdt
VMware Cloud Director - Bypass identity verification Exploit
2023-12-08 00:00:00
VMware Cloud Director 10.5 - Bypass identity verification Exploit
2024-03-12 00:00:00
exploitdb
exploitdb
VMware Cloud Director 10.5 - Bypass identity verification
2024-03-12 00:00:00
packetstorm
packetstorm
VMware Cloud Director 10.5 Authentication Bypass
2024-03-13 00:00:00

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

10

Confidence

High

EPSS

0.001

Percentile

43.5%

JSON
Related for PHSA-2024-5.0-0318
nessus21nodejsblog1mageia1f51openvas5almalinux4rocky4oraclelinux4redhat4osv24photon74ibm3vulnrichment4alpinelinux5ubuntucve5debiancve5hackerone5cvelist5redhatcve3cve5nvd5redos1wolfi2vmware2hivepro1prion1zdt2exploitdb1packetstorm1