Known vulnerabilities in cri-o (Red Hat package) - page 14

Software CPE: cpe:2.3:o:red_hat:cri-o_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Total vulnerabilities: 295
Public exploits: 18
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting cri-o (Red Hat package) cri-o (Red Hat package) is affected by 295 known vulnerabilities: 25 high, 174 medium, 96 low Critical High Medium Low

Vulnerabilities (295)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU69447 - Reachable Assertion
CVE-2020-9283
CWE-617 Medium
Available
No
1.16.6-18.rhaos4.3.git538d861.el7, 1.16.6-18.rhaos4.3.git538d861.el8 21.11.2022 SB2020022039
SB2022112104
SB2023090418
and 6 more
#VU50020 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2021-21615
CWE-367 Medium
No
No
1.19.1-7.rhaos4.6.git6377f68.el7 26.01.2021 SB2021012623
SB2021021723
SB2021022601
and 1 more
#VU49525 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21611
CWE-79 Low
No
No
1.19.1-7.rhaos4.6.git6377f68.el7 14.01.2021 SB2021011418
SB2021011453
SB2021012106
and 2 more
#VU49524 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21610
CWE-79 Low
No
No
1.19.1-7.rhaos4.6.git6377f68.el7 14.01.2021 SB2021011418
SB2021011452
SB2021012106
and 2 more
#VU49523 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21608
CWE-79 Low
No
No
1.19.1-7.rhaos4.6.git6377f68.el7 14.01.2021 SB2021011418
SB2021011450
SB2021012106
and 2 more
#VU49526 - XML Injection
CVE-2021-21604
CWE-91 Medium
No
No
1.19.1-7.rhaos4.6.git6377f68.el7 13.01.2021 SB2021011418
SB2021011446
SB2021012106
and 2 more
#VU49528 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-21605
CWE-22 Medium
No
No
1.19.1-7.rhaos4.6.git6377f68.el7 13.01.2021 SB2021011418
SB2021011447
SB2021012106
and 2 more
#VU49529 - Permissions, Privileges, and Access Controls
CVE-2021-21606
CWE-264 Low
No
No
1.19.1-7.rhaos4.6.git6377f68.el7 13.01.2021 SB2021011418
SB2021011448
SB2021012106
and 2 more
#VU49530 - Memory corruption
CVE-2021-21607
CWE-119 Medium
No
No
1.19.1-7.rhaos4.6.git6377f68.el7 13.01.2021 SB2021011418
SB2021011449
SB2021012106
and 2 more
#VU49531 - Permissions, Privileges, and Access Controls
CVE-2021-21609
CWE-264 Low
No
No
1.19.1-7.rhaos4.6.git6377f68.el7 13.01.2021 SB2021011418
SB2021011451
SB2021012106
and 2 more
#VU48976 - Information Exposure Through Log Files
CVE-2020-8563
CWE-532 Low
No
No
1.19.0-26.rhaos4.6.git8a05a29.el8 07.12.2020 SB2020121507
SB2020121508
SB2020121509
#VU30129 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-2223
CWE-79 Low
No
No
1.17.4-24.rhaos4.4.git73658e6.el7, 1.17.4-24.rhaos4.4.git73658e6.el8 16.07.2020 SB20200716112
SB2020082409
SB2020071911
and 2 more
#VU30128 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-2222
CWE-79 Low
No
No
1.17.4-24.rhaos4.4.git73658e6.el7, 1.17.4-24.rhaos4.4.git73658e6.el8 16.07.2020 SB20200716112
SB2020082409
SB2020071910
and 2 more
#VU30127 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-2221
CWE-79 Low
No
No
1.17.4-24.rhaos4.4.git73658e6.el7, 1.17.4-24.rhaos4.4.git73658e6.el8 16.07.2020 SB20200716112
SB2020082409
SB2020071909
and 2 more
#VU30126 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-2220
CWE-79 Low
No
No
1.17.4-24.rhaos4.4.git73658e6.el7, 1.17.4-24.rhaos4.4.git73658e6.el8 16.07.2020 SB20200716112
SB2020082409
SB2020071908
and 2 more
#VU26514 - Resource exhaustion
CVE-2020-1702
CWE-400 Medium
No
No
1.11.16-0.9.dev.rhaos3.11.git6d43aae.el7, 1.17.4-8.dev.rhaos4.4.git5f5c5e4.el7, 1.17.4-8.dev.rhaos4.4.git5f5c5e4.el8 01.04.2020 SB2020040142
SB2020040143
SB2020040149
and 7 more
#VU26393 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-2163
CWE-79 Low
No
No
1.16.6-15.dev.rhaos4.3.gitebc053b.el7, 1.16.6-15.dev.rhaos4.3.gitebc053b.el8, 1.17.4-14.dev.rhaos4.4.gitb93af5d.el7, 1.17.4-14.dev.rhaos4.4.gitb93af5d.el8 26.03.2020 SB2020032622
SB2020032668
SB2020061738
and 1 more
#VU26392 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-2162
CWE-79 Low
No
No
1.16.6-15.dev.rhaos4.3.gitebc053b.el7, 1.16.6-15.dev.rhaos4.3.gitebc053b.el8, 1.17.4-14.dev.rhaos4.4.gitb93af5d.el7, 1.17.4-14.dev.rhaos4.4.gitb93af5d.el8 26.03.2020 SB2020032622
SB2020032667
SB2020061738
and 1 more
#VU26391 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-2161
CWE-79 Low
No
No
1.16.6-15.dev.rhaos4.3.gitebc053b.el7, 1.16.6-15.dev.rhaos4.3.gitebc053b.el8, 1.17.4-14.dev.rhaos4.4.gitb93af5d.el7, 1.17.4-14.dev.rhaos4.4.gitb93af5d.el8 26.03.2020 SB2020032622
SB2020032662
SB2020061738
and 1 more
#VU26390 - Cross-Site Request Forgery (CSRF)
CVE-2020-2160
CWE-352 Low
No
No
1.16.6-15.dev.rhaos4.3.gitebc053b.el7, 1.16.6-15.dev.rhaos4.3.gitebc053b.el8, 1.17.4-14.dev.rhaos4.4.gitb93af5d.el7, 1.17.4-14.dev.rhaos4.4.gitb93af5d.el8 26.03.2020 SB2020032622
SB2020032661
SB2020061738
and 1 more


Showing elements 261 - 280 out of 295