Known vulnerabilities in Anolis OS 23 - page 134

Vendor: OpenAnolis
Software: Anolis OS
Version: 23
Software CPE: cpe:2.3:o:openanolis:anolis_os:*:*:*:*:*:*:*:*
Website: https://openanolis.cn/
Total vulnerabilities: 2912
Public exploits: 140
Known exploited (KEV): 31

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Anolis OS version 23 Anolis OS 23 is affected by 2912 vulnerabilities: 21 critical, 456 high, 1070 medium, 1365 low Critical High Medium Low

Vulnerabilities (2912)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU85876 - Heap-based Buffer Overflow
CVE-2023-39130		 CWE-122 Low
No
No
 - 29.01.2024 SB2024012926
SB2024012931
SB2023120186
and 7 more
#VU85873 - Use After Free
CVE-2023-39129		 CWE-416 Low
No
No
 - 29.01.2024 SB2024012926
SB2024012928
SB2023111757
and 8 more
#VU83535 - Improper Access Control
CVE-2018-14628		 CWE-284 Low
No
No
 - 28.11.2023 SB2023112848
SB2023113025
SB2023113038
and 5 more
#VU83508 - Off-by-one Error
CVE-2023-47038		 CWE-193 High
No
No
 - 27.11.2023 SB2023112761
SB2023112763
SB2023112959
and 33 more
#VU83439 - Insufficiently Protected Credentials
CVE-2023-35789		 CWE-522 Low
No
No
 - 22.11.2023 SB2023112242
SB20231018146
SB2023112309
and 8 more
#VU82943 - Permissions, Privileges, and Access Controls
CVE-2023-5870		 CWE-264 Low
No
No
 - 09.11.2023 SB2023110930
SB2023111320
SB2023111324
and 54 more
#VU82942 - Integer overflow
CVE-2023-5869		 CWE-190 High
No
No
 - 09.11.2023 SB2023110930
SB2023111320
SB2023111324
and 70 more
#VU82226 - Inefficient Regular Expression Complexity
CVE-2022-40896		 CWE-1333 Medium
No
No
 - 18.10.2023 SB20231018123
SB2023121111
SB2023122110
and 15 more
#VU81495 - Missing release of memory after effective lifetime
CVE-2023-5371		 CWE-401 Medium
No
No
 - 04.10.2023 SB20231004124
SB2023101649
SB2024020151
and 6 more
#VU79932 - Improper input validation
CVE-2023-4512		 CWE-20 Medium
No
No
 - 24.08.2023 SB2023082401
SB2023083147
SB2023083148
and 4 more
#VU79931 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2023-4511		 CWE-835 Medium
No
No
 - 24.08.2023 SB2023082401
SB2023083147
SB2023083148
and 5 more
#VU79930 - Missing release of memory after effective lifetime
CVE-2023-4513		 CWE-401 Medium
No
No
 - 24.08.2023 SB2023082401
SB2023083147
SB2023083148
and 5 more
#VU79803 - Memory corruption
CVE-2023-39976		 CWE-119 High
No
No
 - 21.08.2023 SB20230821103
SB20230821228
SB2023082854
and 22 more
#VU79312 - Improper input validation
CVE-2023-3649		 CWE-20 Medium
No
No
 - 09.08.2023 SB2023080949
SB2023091569
SB2024090957
and 2 more
#VU79311 - Improper input validation
CVE-2023-3648		 CWE-20 Medium
No
No
 - 09.08.2023 SB2023080949
SB2023080951
SB2023081210
and 2 more
#VU78930 - Incorrect Default Permissions
CVE-2023-38497		 CWE-276 Low
Public exploit available
No
 - 03.08.2023 SB2023080354
SB2023080355
SB2023080365
and 16 more
#VU75389 - Resource exhaustion
CVE-2023-28450		 CWE-400 Medium
No
No
 - 20.04.2023 SB2023042040
SB2023042041
SB2023042042
and 30 more
#VU72432 - Heap-based Buffer Overflow
CVE-2022-48303		 CWE-122 High
No
No
 - 21.02.2023 SB2023022105
SB2023022111
SB2023022112
and 72 more
#VU67972 - Missing release of memory after effective lifetime
CVE-2020-29260		 CWE-401 Medium
No
No
 - 06.10.2022 SB2022100646
SB2022100647
SB2022111531
and 3 more
#VU65327 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-31081		 CWE-444 Medium
No
No
 - 14.07.2022 SB2022071425
SB2022071426
SB2022071826
and 14 more


Showing elements 2661 - 2680 out of 2912