Lucene search

Moment.js vulnerabilities

🗓️ 10 Aug 2022 00:00:00Reported by UbuntuType

ubuntu🔗 ubuntu.com👁 1946 Views

Moment.js vulnerabilities in Ubuntu 22.04, 20.04, and 18.04 ESM with node-moment package. Two types of issues: integrity loss (CVE-2022-24785) and denial of service (CVE-2022-31129)

Reporter	Title	Published	Views	Family All 199
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in moment.js affect IBM Maximo Asset Management and the IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2022-31129, CVE-2022-24785)	15 Feb 202319:11	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Engineering Workflow Management (EWM) vulnerabilities CVE-2022-31129, CVE-2022-24785	27 Mar 202317:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Guardium Data Encryption is using Components with Known Vulnerabilities (CVE-2022-31129, CVE-2022-24785)	17 Feb 202311:41	–	ibm
IBM Security Bulletins	Security Bulletin: Open Source Dependency Vulnerability	15 May 202318:30	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in moment-timezone affects IBM VM Recovery Manager DR GUI	20 Sep 202310:22	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar DNS Analyzer App for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities (CVE-2022-31129, CVE-2022-24785, CVE-2017-18214)	5 Oct 202222:40	–	ibm
IBM Security Bulletins	Security Bulletin: Moment.js issue of validating, manipulating, and formatting dates	13 Aug 202406:16	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in moment-timezone affects IBM VM Recovery Manager DR GUI	19 Sep 202309:06	–	ibm
IBM Security Bulletins	Security Bulletin: There is a vulnerability in moment.js used by IBM Jazz Reporting Service (CVE-2022-24785)	4 Oct 202310:43	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in moment.js affect IBM Storage Scale	8 May 202407:15	–	ibm

Source	Link
ubuntu	www.ubuntu.com/security/CVE-2022-31129
ubuntu	www.ubuntu.com/security/CVE-2022-24785

OS	OS Version	Architecture	Package	Package Version	Filename
Ubuntu	22.04	noarch	node-moment	2.29.1+ds-3ubuntu0.2	UNKNOWN
Ubuntu	22.04	noarch	libjs-moment	2.29.1+ds-3ubuntu0.2	UNKNOWN
Ubuntu	20.04	noarch	node-moment	2.24.0+ds-2ubuntu0.1	UNKNOWN
Ubuntu	20.04	noarch	libjs-moment	2.24.0+ds-2ubuntu0.1	UNKNOWN
Ubuntu	18.04	noarch	node-moment	2.20.1+ds-1ubuntu0.1	UNKNOWN
Ubuntu	18.04	noarch	libjs-moment	2.20.1+ds-1ubuntu0.1	UNKNOWN

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

10 Aug 2022 00:00Current

8High risk

Vulners AI Score8

CVSS25

CVSS37.5

EPSS0.005