Known vulnerabilities in podman-plugins

Vendor: openEuler
Software: podman-plugins
Software CPE: cpe:2.3:o:openeuler:podman-plugins:*:*:*:*:*:openeuler:*:*
Website: https://www.openeuler.org/
Total vulnerabilities: 20
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting podman-plugins podman-plugins is affected by 20 known vulnerabilities: 13 medium, 7 low Critical High Medium Low

Vulnerabilities (20)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU111945 - Improper Certificate Validation
CVE-2025-6032		 CWE-295 Medium
No
No
 4.9.4-19 25.06.2025 SB2025062534
SB2025062541
SB2025062542
and 26 more
#VU98828 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-9675		 CWE-22 Low
No
No
 4.9.4-13 21.10.2024 SB2024102103
SB2024102104
SB2024102107
and 51 more
#VU98817 - UNIX Symbolic Link (Symlink) Following
CVE-2024-9676		 CWE-61 Low
No
No
 4.9.4-13 18.10.2024 SB2024101822
SB2024101823
SB2024101824
and 54 more
#VU98141 - Improper input validation
CVE-2024-9341		 CWE-20 Low
No
No
 4.9.4-13 08.10.2024 SB2024100842
SB2024100843
SB2024100848
and 44 more
#VU98140 - Improper input validation
CVE-2024-9407		 CWE-20 Low
No
No
 4.9.4-13 08.10.2024 SB2024100842
SB2024100843
SB2024100848
and 24 more
#VU98022 - Use of Uninitialized Variable
CVE-2024-9355		 CWE-457 Medium
No
No
 3.4.4-5, 4.9.4-13 03.10.2024 SB2024100348
SB2024100349
SB2024101608
and 24 more
#VU94743 - Resource exhaustion
CVE-2024-37298		 CWE-400 Medium
No
No
 3.4.4-5, 4.9.4-13 25.07.2024 SB2024072523
SB2024072527
SB2024080127
and 13 more
#VU94616 - Information Exposure Through Log Files
CVE-2024-6104		 CWE-532 Low
No
No
 4.9.4-13 19.07.2024 SB2024071927
SB2024071929
SB2024071930
and 83 more
#VU93850 - Resource exhaustion
CVE-2024-24791		 CWE-400 Medium
No
No
 3.4.4-5, 4.9.4-13 07.07.2024 SB2024070727
SB2024070728
SB2024070729
and 86 more
#VU87329 - Resource exhaustion
CVE-2024-28176		 CWE-400 Medium
No
No
 4.9.4-14 11.03.2024 SB2024031123
SB2024031446
SB2024031447
and 37 more
#VU87200 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-24785		 CWE-79 Low
No
No
 3.4.4-8, 4.9.4-14 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 61 more
#VU74843 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2023-0778		 CWE-367 Medium
No
No
 3.4.4-8 11.04.2023 SB2023041130
SB2023041131
SB2023051738
and 10 more
#VU69290 - Incorrect Authorization
CVE-2022-2989		 CWE-863 Low
No
No
 3.4.4-8 14.11.2022 SB2022111428
SB2022111429
SB2022111430
and 14 more
#VU68897 - Resource exhaustion
CVE-2022-32149		 CWE-400 Medium
No
No
 3.4.4-2 01.11.2022 SB2022110139
SB2022110140
SB2022110142
and 68 more
#VU68390 - Resource exhaustion
CVE-2022-41715		 CWE-400 Medium
No
No
 3.4.4-5, 4.9.4-13 18.10.2022 SB2022101833
SB2022101834
SB2022102005
and 113 more
#VU68389 - Improper input validation
CVE-2022-2880		 CWE-20 Medium
No
No
 3.4.4-5, 4.9.4-13 18.10.2022 SB2022101833
SB2022101834
SB2022102005
and 94 more
#VU66121 - Improper input validation
CVE-2022-32189		 CWE-20 Medium
No
No
 3.4.4-5, 4.9.4-13 04.08.2022 SB2022080502
SB2022080503
SB2022080511
and 81 more
#VU66065 - Resource exhaustion
CVE-2022-1962		 CWE-400 Medium
No
No
 3.4.4-5, 4.9.4-13 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 73 more
#VU61829 - Permissions, Privileges, and Access Controls
CVE-2022-27649		 CWE-264 Medium
No
No
 3.4.4-8 04.04.2022 SB2022040410
SB2022042012
SB2022042725
and 14 more
#VU20201 - Resource exhaustion
CVE-2019-9514		 CWE-400 Medium
No
No
 3.4.4-5, 4.9.4-13 13.08.2019 SB2019081326
SB2019082004
SB2019082502
and 79 more