Known vulnerabilities in cockpit-ovirt (Red Hat package)

Known vulnerabilities in cockpit-ovirt (Red Hat package)

Vendor: Red Hat Inc.

Software: cockpit-ovirt (Red Hat package)

Software CPE: cpe:2.3:o:red_hat:cockpit-ovirt_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*

Website: https://www.redhat.com/en

Total vulnerabilities: 15

Public exploits: 6

Known exploited (KEV): 1

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (15)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU65835 - Incorrect Regular Expression CVE-2022-31129	CWE-185	Medium	No	No	0.16.2-1.el8ev	27.07.2022	SB2022072729 SB2022072901 SB2022081048 and 102 more
#VU54394 - Incorrect Regular Expression CVE-2020-28500	CWE-185	Medium	No	No	0.15.1-2.el8ev	27.06.2021	SB2021062702 SB2021062703 SB2021090905 and 30 more
#VU53202 - Command injection CVE-2021-23337	CWE-77	Medium	No	No	0.15.1-2.el8ev	12.05.2021	SB2021021525 SB2021051230 SB2021062703 and 59 more
#VU50990 - Integer overflow CVE-2020-36242	CWE-190	High	No	No	0.15.0-2.el8ev	28.02.2021	SB2021022812 SB2021022813 SB2021052024 and 27 more
#VU50040 - Heap-based Buffer Overflow CVE-2021-3156	CWE-122	Low	Available	Exploited	0.14.17-1.el8ev	26.01.2021	SB2021012632 SB2021012633 SB2021012634 and 55 more
#VU49845 - Insufficient Verification of Data Authenticity CVE-2020-25686	CWE-345	Low	Available	No	0.14.17-1.el8ev	20.01.2021	SB2021012070 SB20210120108 SB20210120122 and 27 more
#VU49844 - Use of a Broken or Risky Cryptographic Algorithm CVE-2020-25685	CWE-327	Low	Available	No	0.14.17-1.el8ev	20.01.2021	SB2021012070 SB20210120107 SB20210120122 and 27 more
#VU49843 - Insufficient Verification of Data Authenticity CVE-2020-25684	CWE-345	Low	Available	No	0.14.17-1.el8ev	20.01.2021	SB2021012070 SB20210120106 SB20210120122 and 27 more
#VU50367 - Covert Timing Channel CVE-2020-25659	CWE-385	Medium	No	No	0.15.0-2.el8ev	11.01.2021	SB2020111230 SB2021052024 SB2021060319 and 18 more
#VU48444 - Uncontrolled Recursion CVE-2020-28196	CWE-674	Medium	No	No	0.15.0-2.el8ev	06.11.2020	SB2020111617 SB2020111618 SB2020112306 and 23 more
#VU45985 - Out-of-bounds write CVE-2020-14364	CWE-787	Medium	Available	No	0.14.11-1.el8ev	24.08.2020	SB2020082410 SB2020090715 SB2020091121 and 35 more
#VU41989 - Improper Control of Generation of Code ('Code Injection') CVE-2020-8203	CWE-94	Medium	No	No	0.14.15-1.el8ev	10.08.2020	SB2020071548 SB2020122111 SB2021042308 and 31 more
#VU32922 - Out-of-bounds write CVE-2020-10713	CWE-787	Low	Available	No	0.14.11-1.el8ev	30.07.2020	SB2020073018 SB2020073026 SB2020073027 and 33 more
#VU48780 - Memory corruption CVE-2015-8011	CWE-119	High	No	No	0.14.15-1.el8ev	28.01.2020	SB2020012836 SB2020120408 SB2020120409 and 17 more
#VU13949 - NULL Pointer Dereference CVE-2018-14404	CWE-476	Low	No	No	0.13.10-1.el7ev	19.07.2018	SB2018072012 SB2018090705 SB2018101502 and 13 more