Known vulnerabilities in atomic-openshift-service-idler (Red Hat package) - page 7

Software CPE: cpe:2.3:o:red_hat:atomic-openshift-service-idler_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Total vulnerabilities: 142
Public exploits: 12
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting atomic-openshift-service-idler (Red Hat package) atomic-openshift-service-idler (Red Hat package) is affected by 142 known vulnerabilities: 14 high, 80 medium, 48 low Critical High Medium Low

Vulnerabilities (142)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU53399 - Security Features
CVE-2021-30465
CWE-254 Low
No
No
3.11.452-1.git.39cfc66.el7 20.05.2021 SB2021052013
SB2021052014
SB2021052015
and 34 more
#VU52495 - Permissions, Privileges, and Access Controls
CVE-2021-21645
CWE-264 Low
No
No
3.11.462-1.git.39cfc66.el7, 4.5.0-202106011407.p0.git.39cfc66.el7 22.04.2021 SB2021042205
SB2021060101
SB2021063033
and 3 more
#VU52494 - Cross-Site Request Forgery (CSRF)
CVE-2021-21644
CWE-352 Low
No
No
3.11.462-1.git.39cfc66.el7, 4.5.0-202106011407.p0.git.39cfc66.el7 22.04.2021 SB2021042205
SB2021060101
SB2021063033
and 3 more
#VU51604 - Improper Validation of Certificate with Host Mismatch
CVE-2021-28363
CWE-297 Medium
No
No
3.11.420-1.git.15.021a26a.el7 22.03.2021 SB2021032215
SB2021052523
SB2021071501
and 9 more
#VU50020 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2021-21615
CWE-367 Medium
No
No
4.6.0-202102031810.p0.git.15.dcab90a.el8 26.01.2021 SB2021012623
SB2021021723
SB2021022601
and 1 more
#VU49525 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21611
CWE-79 Low
No
No
4.6.0-202102031810.p0.git.15.dcab90a.el8 14.01.2021 SB2021011418
SB2021011453
SB2021012106
and 2 more
#VU49524 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21610
CWE-79 Low
No
No
4.6.0-202102031810.p0.git.15.dcab90a.el8 14.01.2021 SB2021011418
SB2021011452
SB2021012106
and 2 more
#VU49523 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21608
CWE-79 Low
No
No
4.6.0-202102031810.p0.git.15.dcab90a.el8 14.01.2021 SB2021011418
SB2021011450
SB2021012106
and 2 more
#VU49522 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21603
CWE-79 Low
No
No
4.6.0-202102031810.p0.git.15.dcab90a.el8 13.01.2021 SB2021011418
SB2021011445
SB2021012106
and 2 more
#VU49526 - XML Injection
CVE-2021-21604
CWE-91 Medium
No
No
4.6.0-202102031810.p0.git.15.dcab90a.el8 13.01.2021 SB2021011418
SB2021011446
SB2021012106
and 2 more
#VU49527 - Exposure of sensitive information to an unauthorized actor
CVE-2021-21602
CWE-200 Medium
No
No
4.6.0-202102031810.p0.git.15.dcab90a.el8 13.01.2021 SB2021011418
SB2021011444
SB2021012106
and 2 more
#VU49528 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-21605
CWE-22 Medium
No
No
4.6.0-202102031810.p0.git.15.dcab90a.el8 13.01.2021 SB2021011418
SB2021011447
SB2021012106
and 2 more
#VU49529 - Permissions, Privileges, and Access Controls
CVE-2021-21606
CWE-264 Low
No
No
4.6.0-202102031810.p0.git.15.dcab90a.el8 13.01.2021 SB2021011418
SB2021011448
SB2021012106
and 2 more
#VU49530 - Memory corruption
CVE-2021-21607
CWE-119 Medium
No
No
4.6.0-202102031810.p0.git.15.dcab90a.el8 13.01.2021 SB2021011418
SB2021011449
SB2021012106
and 2 more
#VU49531 - Permissions, Privileges, and Access Controls
CVE-2021-21609
CWE-264 Low
No
No
4.6.0-202102031810.p0.git.15.dcab90a.el8 13.01.2021 SB2021011418
SB2021011451
SB2021012106
and 2 more
#VU45699 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2020-16845
CWE-835 Medium
No
No
4.4.0-202011122017.p0.git.15.d3ab88f.el7, 4.5.0-202010081312.p0.git.15.d7814b2.el7, 4.5.0-202011121956.p0.git.15.cccc412.el7, 4.7.0-202104260636.p0.git.330c6ef.el8 14.08.2020 SB2020081403
SB2020081404
SB2020081405
and 44 more
#VU31891 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2020-15586
CWE-362 Medium
No
No
4.4.0-202011122017.p0.git.15.d3ab88f.el7, 4.5.0-202010081312.p0.git.15.d7814b2.el7, 4.5.0-202011121956.p0.git.15.cccc412.el7, 4.7.0-202104260636.p0.git.330c6ef.el8 27.07.2020 SB2020072734
SB2020072735
SB2020072749
and 37 more
#VU27924 - Incorrect Default Permissions
CVE-2020-1945
CWE-276 Low
No
No
4.6.0-202102031810.p0.git.15.dcab90a.el8 15.05.2020 SB2020051501
SB2020052114
SB2020060205
and 49 more
#VU47428 - Permissions, Privileges, and Access Controls
CVE-2020-11979
CWE-264 Low
No
No
4.6.0-202102031810.p0.git.15.dcab90a.el8 14.05.2020 SB2020100804
SB2020100815
SB2020111614
and 51 more
#VU35005 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2018-1002102
CWE-601 Low
No
No
3.11.346-1.git.15.35bbcf7.el7 05.12.2019 SB2019120529
SB2020121809
SB2020010218


Showing elements 121 - 140 out of 142