Known vulnerabilities in skopeo - page 4

Vendor: OpenAnolis
Software: skopeo
Software CPE: cpe:2.3:o:openanolis:skopeo:*:*:*:*:*:anolis_os:*:*
Website: https://openanolis.cn/
Total vulnerabilities: 100
Public exploits: 5
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting skopeo skopeo is affected by 100 known vulnerabilities: 3 high, 73 medium, 24 low Critical High Medium Low

Vulnerabilities (100)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU103500 - Permissions, Privileges, and Access Controls
CVE-2024-11218		 CWE-264 Medium
No
No
 1.14.5-3.0.1 03.02.2025 SB2025020321
SB2025020332
SB2025020333
and 34 more
#VU98828 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-9675		 CWE-22 Low
No
No
 1.14.5-3.0.1 21.10.2024 SB2024102103
SB2024102104
SB2024102107
and 51 more
#VU98817 - UNIX Symbolic Link (Symlink) Following
CVE-2024-9676		 CWE-61 Low
No
No
 1.14.5-3.0.1 18.10.2024 SB2024101822
SB2024101823
SB2024101824
and 54 more
#VU98141 - Improper input validation
CVE-2024-9341		 CWE-20 Low
No
No
 1.14.5-3.0.1 08.10.2024 SB2024100842
SB2024100843
SB2024100848
and 44 more
#VU98140 - Improper input validation
CVE-2024-9407		 CWE-20 Low
No
No
 1.14.5-3.0.1 08.10.2024 SB2024100842
SB2024100843
SB2024100848
and 24 more
#VU79294 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-3978		 CWE-79 Low
No
No
 1.13.3-3.0.1 09.08.2023 SB2023080938
SB2023081013
SB20230821167
and 54 more
#VU78327 - Improper Neutralization of HTTP Headers for Scripting Syntax
CVE-2023-29406		 CWE-644 Medium
No
No
 1.13.3-3.0.1 17.07.2023 SB2023071737
SB2023071738
SB2023071739
and 94 more
#VU75792 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-29400		 CWE-79 Medium
No
No
 1.13.3-3.0.1 08.05.2023 SB2023050814
SB2023050817
SB2023050825
and 74 more
#VU75790 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-24539		 CWE-79 Medium
No
No
 1.13.3-3.0.1 08.05.2023 SB2023050814
SB2023050817
SB2023050825
and 75 more
#VU74574 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-24538		 CWE-94 High
No
No
 1.13.3-3.0.1 06.04.2023 SB2023040668
SB2023040678
SB2023040679
and 85 more
#VU74573 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2023-24537		 CWE-835 Medium
No
No
 1.13.3-3.0.1 06.04.2023 SB2023040668
SB2023040678
SB2023040679
and 87 more
#VU74572 - Resource Management Errors
CVE-2023-24536		 CWE-399 Medium
No
No
 1.13.3-3.0.1 06.04.2023 SB2023040668
SB2023040678
SB2023040679
and 80 more
#VU74571 - Resource exhaustion
CVE-2023-24534		 CWE-400 Medium
No
No
 1.13.3-3.0.1 06.04.2023 SB2023040668
SB2023040678
SB2023040679
and 85 more
#VU74190 - Improper Access Control
CVE-2023-27561		 CWE-284 Low
No
No
 1.13.3-3.0.1 30.03.2023 SB2023033025
SB2023040327
SB2023042614
and 40 more
#VU74189 - Improper preservation of permissions
CVE-2023-25809		 CWE-281 Low
No
No
 1.13.3-3.0.1 30.03.2023 SB2023033025
SB2023040327
SB2023042614
and 23 more
#VU73722 - Resource exhaustion
CVE-2022-41725		 CWE-400 Medium
No
No
 1.13.3-3.0.1 15.03.2023 SB2023030130
SB2023031537
SB2023031538
and 80 more
#VU72686 - Resource exhaustion
CVE-2022-41723		 CWE-400 Medium
No
No
 1.13.3-3.0.1 01.03.2023 SB2023030130
SB2023030131
SB2023030946
and 190 more
#VU72314 - Resource exhaustion
CVE-2022-3064		 CWE-400 Medium
No
No
 1.13.3-3.0.1 16.02.2023 SB2023021601
SB2023021602
SB2023022185
and 37 more
#VU58668 - Exposure of sensitive information to an unauthorized actor
CVE-2021-4024		 CWE-200 Low
No
No
 1.14.5-3.0.1 08.12.2021 SB2021120807
SB2022111597
SB2023012731
and 7 more
#VU56024 - Resource Management Errors
CVE-2021-33198		 CWE-399 Medium
No
No
 1.14.3-2.0.1, 1.14.5-3.0.1 22.08.2021 SB2021070405
SB2021082204
SB2021083116
and 46 more


Showing elements 61 - 80 out of 100