Known vulnerabilities in Anolis OS 23 - page 102

Vendor: OpenAnolis
Software: Anolis OS
Version: 23
Software CPE: cpe:2.3:o:openanolis:anolis_os:*:*:*:*:*:*:*:*
Website: https://openanolis.cn/
Total vulnerabilities: 2912
Public exploits: 140
Known exploited (KEV): 31

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Anolis OS version 23 Anolis OS 23 is affected by 2912 vulnerabilities: 21 critical, 456 high, 1070 medium, 1365 low Critical High Medium Low

Vulnerabilities (2912)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU112734 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2024-42516		 CWE-113 Low
No
No
 - 10.07.2025 SB2025071040
SB2025071710
SB2025071764
and 37 more
#VU112728 - Cryptographic Issues
CVE-2025-49812		 CWE-310 Medium
No
No
 - 10.07.2025 SB2025071040
SB2025071764
SB2025072111
and 35 more
#VU111966 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-4517		 CWE-22 High
Public exploit available
No
 - 26.06.2025 SB2025062630
SB2025062633
SB2025062634
and 77 more
#VU109840 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-47273		 CWE-22 High
No
No
 - 27.05.2025 SB2025052721
SB2025052734
SB2025052736
and 112 more
#VU99614 - Improper input validation
CVE-2024-50602		 CWE-20 Medium
No
No
 - 01.11.2024 SB2024110155
SB2024110182
SB2024110534
and 98 more
#VU98567 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-3219		 CWE-362 Low
No
No
 - 15.10.2024 SB2024101561
SB2024101575
SB2024101576
and 7 more
#VU96945 - Resource exhaustion
CVE-2024-7592		 CWE-400 Medium
No
No
 - 09.09.2024 SB2024090916
SB2024090917
SB2024090918
and 72 more
#VU96899 - Integer overflow
CVE-2024-45492		 CWE-190 High
No
No
 - 05.09.2024 SB20240905100
SB20240905101
SB20240905102
and 108 more
#VU96898 - Integer overflow
CVE-2024-45491		 CWE-190 High
No
No
 - 05.09.2024 SB20240905100
SB20240905101
SB20240905102
and 106 more
#VU96897 - Buffer Underwrite ('Buffer Underflow')
CVE-2024-45490		 CWE-124 High
No
No
 - 05.09.2024 SB20240905100
SB20240905101
SB20240905102
and 113 more
#VU96745 - Incorrect Regular Expression
CVE-2024-6232		 CWE-185 Medium
No
No
 - 03.09.2024 SB2024090377
SB2024090927
SB2024091048
and 145 more
#VU96596 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-8088		 CWE-835 Medium
No
No
 - 28.08.2024 SB2024082860
SB2024082861
SB2024082862
and 82 more
#VU95571 - Command injection
CVE-2024-6923		 CWE-77 Medium
No
No
 - 08.08.2024 SB2024080861
SB2024080862
SB2024080863
and 144 more
#VU95339 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-6345		 CWE-94 High
No
No
 - 05.08.2024 SB2024080590
SB2024080593
SB2024080594
and 160 more
#VU95157 - Incorrect Provision of Specified Functionality
CVE-2024-4032		 CWE-684 Medium
No
No
 - 02.08.2024 SB2024080203
SB2024080207
SB2024080209
and 101 more
#VU88151 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2023-38709		 CWE-113 Medium
No
No
 - 04.04.2024 SB2024040458
SB2024040502
SB2024040903
and 65 more
#VU87685 - Resource exhaustion
CVE-2024-0450		 CWE-400 Medium
No
No
 - 21.03.2024 SB2024032107
SB2024032110
SB2024040848
and 80 more
#VU87337 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2024-28757		 CWE-611 Medium
No
No
 - 11.03.2024 SB2024031135
SB2024031143
SB2024031144
and 75 more
#VU85620 - Heap-based Buffer Overflow
CVE-2024-0684		 CWE-122 Low
Public exploit available
No
 - 19.01.2024 SB2024011930
SB2024011932
SB2024032902
and 2 more
#VU82980 - Improper input validation
CVE-2023-27043		 CWE-20 Medium
No
No
 - 10.11.2023 SB2023041957
SB2023111064
SB2023111315
and 120 more


Showing elements 2021 - 2040 out of 2912