Known vulnerabilities in atomic-openshift-service-idler (Red Hat package) - page 7
Vendor:
Red Hat Inc.
Software CPE:
cpe:2.3:o:red_hat:atomic-openshift-service-idler_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
142
Public exploits:
12
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
4.13.0-202303172327.p0.ga0f9090.assembly.stream.el8
4.11.0-202304070715.p0.ga0f9090.assembly.stream.el8
4.11.0-202303240327.p0.ga0f9090.assembly.stream.el8
4.10.0-202302072053.p0.ga0f9090.assembly.stream.el8
4.6.0-202107291238.p0.git.39cfc66.el8
4.8.0-202107291413.p0.git.39cfc66.assembly.stream.el8
3.11.394-1.git.15.73f73cd.el7
4.7.0-202011171454.p0.git.15.675c1c8.el8
3.11.374-1.git.15.523a1f7.el7
4.6.0-202010011936.p0.git.15.36f28b7.el8
4.3.40-202010141211.p0.git.15.7d393d8.el7
4.3.28-202006270952.p0.git.13.4a5b28a.el7
4.4.0-202006271254.p0.git.13.6b09c66.el7
3.11.232-1.git.1.424e270.el7
4.3.0-202001131753.git.1.47128a9.el7
4.12.0-202210141624.p0.ga0f9090.assembly.stream.el8
4.11.0-202211072116.p0.ga0f9090.assembly.stream.el8
4.11.0-202206222028.p0.g39cfc66.assembly.stream.el8
4.10.0-202207192015.p0.g39cfc66.assembly.stream.el8
3.11.715-1.g39cfc66.el7
3.11.705-1.g39cfc66.el7
3.11.685-1.g39cfc66.el7
4.6.0-202202251050.p0.g39cfc66.assembly.stream.el8
4.10.0-202202160023.p0.g39cfc66.assembly.stream.el8
3.11.634-1.g39cfc66.el7
4.7.0-202201082234.p0.g39cfc66.assembly.stream.el8
3.11.569-1.g39cfc66.el7
3.11.542-1.git.39cfc66.el7
4.9.0-202109101042.p0.git.39cfc66.assembly.stream.el8
3.11.524-1.git.39cfc66.el7
4.6.0-202108202025.p0.git.39cfc66.assembly.stream.el8
4.7.0-202107291238.p0.git.39cfc66.assembly.stream.el8
3.11.501-1.git.39cfc66.el7
4.8.0-202106281541.p0.git.39cfc66.assembly.stream.el8
4.7.0-202107070256.p0.git.39cfc66.assembly.stream.el8
4.5.0-202106011407.p0.git.39cfc66.el7
3.11.462-1.git.39cfc66.el7
3.11.452-1.git.39cfc66.el7
3.11.420-1.git.15.021a26a.el7
4.7.0-202105111743.p0.git.39cfc66.el8
4.7.0-202104260636.p0.git.330c6ef.el8
3.11.404-1.git.15.6c64591.el7
4.6.0-202102031810.p0.git.15.dcab90a.el8
4.6.0-202012171504.p0.git.15.f4535bc.el8
3.11.346-1.git.15.35bbcf7.el7
4.4.0-202011122017.p0.git.15.d3ab88f.el7
4.5.0-202011121956.p0.git.15.cccc412.el7
4.5.0-202010081312.p0.git.15.d7814b2.el7
3.11.248-1.git.1.4c42a90.el7
3.11.161-1.git.1.88f46ce.el7
4.3.10-202003300415.git.13.ac05c4a.el7
4.3.25-202006081518.git.1.79365c5.el7
4.2.4-201911041319.git.1.4131c2f.el7
4.2.0-201910101431.git.1.b99e6ee.el7
3.11.153-1.git.1.208da50.el7
4.4.0-202006080017.git.1.7e463c3.el7
3.11.219-1.git.1.958cdae.el7
4.3.1-202002031701.git.1.a23cda8.el7
4.3.9-202003230116.git.13.7ac3e5c.el7
4.2.20-202002170402.git.1.43218bc.el7
4.3.3-202002170501.git.1.4feff9c.el7
3.11.170-1.git.1.8328979.el7
4.3.5-202003020117.git.13.3ac2b0e.el7
3.11.154-1.git.1.f80fb86.el7
3.11.146-1.git.1.723cb8d.el7
3.11.117-1.git.1.887bb82.el7
3.11.98-1.git.14.1793066.el7
3.11.82-1.git.14.e353758.el7
3.11.51-1.git.14.813574a.el7
3.11.59-1.git.14.1d7c0b6.el7
3.11.16-1.git.14.a65cbf0.el7
3.11.43-1.git.14.bbbb450.el7
Vulnerabilities (142)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU60104 - Improper input validation CVE-2020-8554 |
CWE-20 | Medium | 3.11.374-1.git.15.523a1f7.el7 | 27.01.2022 |
SB2022012749 SB2022012750 SB2022042257 and 2 more |
||
| #VU47403 - Improper Neutralization of CRLF Sequences ('CRLF Injection') CVE-2020-26137 |
CWE-93 | Medium | 3.11.374-1.git.15.523a1f7.el7 | 30.09.2020 |
SB2020100716 SB2020121420 SB2021052028 and 35 more |
||
| #VU34130 - Permissions, Privileges, and Access Controls CVE-2020-8559 |
CWE-264 | Medium | 3.11.346-1.git.15.35bbcf7.el7 | 22.07.2020 |
SB2020072221 SB2020120203 SB2020121809 and 6 more |
||
| #VU26474 - Uncontrolled Memory Allocation CVE-2020-8552 |
CWE-789 | Medium | 4.3.9-202003230116.git.13.7ac3e5c.el7 | 31.03.2020 |
SB2020033111 SB2020040174 SB2020042251 and 6 more |
||
| #VU26412 - Improper Neutralization of CRLF Sequences ('CRLF Injection') CVE-2019-11236 |
CWE-93 | Medium | 4.3.28-202006270952.p0.git.13.4a5b28a.el7, 4.4.0-202006271254.p0.git.13.6b09c66.el7 | 26.03.2020 |
SB2020032626 SB2020031827 SB2019091504 and 36 more |
||
| #VU26393 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-2163 |
CWE-79 | Low | 4.3.25-202006081518.git.1.79365c5.el7, 4.4.0-202006080017.git.1.7e463c3.el7 | 26.03.2020 |
SB2020032622 SB2020032668 SB2020061738 and 1 more |
||
| #VU26392 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-2162 |
CWE-79 | Low | 4.3.25-202006081518.git.1.79365c5.el7, 4.4.0-202006080017.git.1.7e463c3.el7 | 26.03.2020 |
SB2020032622 SB2020032667 SB2020061738 and 1 more |
||
| #VU26391 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2020-2161 |
CWE-79 | Low | 4.3.25-202006081518.git.1.79365c5.el7, 4.4.0-202006080017.git.1.7e463c3.el7 | 26.03.2020 |
SB2020032622 SB2020032662 SB2020061738 and 1 more |
||
| #VU26390 - Cross-Site Request Forgery (CSRF) CVE-2020-2160 |
CWE-352 | Low | 4.3.25-202006081518.git.1.79365c5.el7, 4.4.0-202006080017.git.1.7e463c3.el7 | 26.03.2020 |
SB2020032622 SB2020032661 SB2020061738 and 1 more |
||
| #VU25501 - Use After Free CVE-2020-8945 |
CWE-416 | High | 4.3.10-202003300415.git.13.ac05c4a.el7 | 21.02.2020 |
SB2020022110 SB2020031116 SB2020031126 and 23 more |
||
| #VU24764 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing) CVE-2020-2105 |
CWE-451 | Low | 4.3.5-202003020117.git.13.3ac2b0e.el7 | 30.01.2020 |
SB2020013005 SB20200310153 |
||
| #VU24763 - Exposure of sensitive information to an unauthorized actor CVE-2020-2104 |
CWE-200 | Low | 4.3.5-202003020117.git.13.3ac2b0e.el7 | 30.01.2020 |
SB2020013005 SB20200310153 |
||
| #VU24762 - Exposure of sensitive information to an unauthorized actor CVE-2020-2103 |
CWE-200 | Low | 4.3.5-202003020117.git.13.3ac2b0e.el7 | 30.01.2020 |
SB2020013005 SB20200310153 |
||
| #VU24761 - Cryptographic Issues CVE-2020-2102 |
CWE-310 | Medium | 4.3.5-202003020117.git.13.3ac2b0e.el7 | 30.01.2020 |
SB2020013005 SB20200310153 |
||
| #VU24760 - Exposure of sensitive information to an unauthorized actor CVE-2020-2101 |
CWE-200 | Medium | 4.3.5-202003020117.git.13.3ac2b0e.el7 | 30.01.2020 |
SB2020013005 SB20200310153 |
||
| #VU24759 - Resource Management Errors CVE-2020-2100 |
CWE-399 | Medium | 4.3.5-202003020117.git.13.3ac2b0e.el7 | 30.01.2020 |
SB2020013005 SB20200310153 |
||
| #VU24758 - Improper Authentication CVE-2020-2099 |
CWE-287 | High | 4.3.5-202003020117.git.13.3ac2b0e.el7 | 30.01.2020 |
SB2020013004 SB20200310153 |
||
| #VU35005 - URL Redirection to Untrusted Site ('Open Redirect') CVE-2018-1002102 |
CWE-601 | Low | 3.11.346-1.git.15.35bbcf7.el7 | 05.12.2019 |
SB2019120529 SB2020121809 SB2020010218 |
||
| #VU21780 - Improper Certificate Validation CVE-2019-11324 |
CWE-295 | Medium | 4.3.28-202006270952.p0.git.13.4a5b28a.el7, 4.4.0-202006271254.p0.git.13.6b09c66.el7 | 15.10.2019 |
SB2019041823 SB2020031827 SB2019091504 and 19 more |
||
| #VU21118 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') CVE-2019-10392 |
CWE-78 | Medium | 4.2.20-202002170402.git.1.43218bc.el7, 4.3.3-202002170501.git.1.4feff9c.el7 | 16.09.2019 |
SB2019091607 SB2020061842 SB2020022451 and 2 more |
Showing elements 121 - 140 out of 142