Known vulnerabilities in Cryostat - page 2

Vendor: Red Hat Inc.
Software: Cryostat
Software CPE: cpe:2.3:a:red_hat:cryostat:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 156
Public exploits: 11
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cryostat Cryostat is affected by 156 known vulnerabilities: 22 high, 94 medium, 40 low Critical High Medium Low

Vulnerabilities (156)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU98644 - Improper input validation
CVE-2024-21235		 CWE-20 Medium
No
No
 - 15.10.2024 SB20241015214
SB20241015215
SB20241015216
and 129 more
#VU98645 - Improper input validation
CVE-2024-21210		 CWE-20 Low
No
No
 - 15.10.2024 SB20241015215
SB2024101668
SB2024101672
and 122 more
#VU98647 - Improper input validation
CVE-2024-21208		 CWE-20 Low
No
No
 - 15.10.2024 SB20241015214
SB20241015215
SB20241015216
and 139 more
#VU98648 - Improper input validation
CVE-2024-21217		 CWE-20 Low
No
No
 - 15.10.2024 SB20241015214
SB20241015215
SB20241015216
and 142 more
#VU98137 - Allocation of Resources Without Limits or Throttling
CVE-2024-40094		 CWE-770 Medium
Available
No
 - 08.10.2024 SB2024100835
SB2024100936
SB2024101593
and 27 more
#VU97758 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2024-45801		 CWE-1321 Medium
No
No
 - 27.09.2024 SB2024092751
SB2024100823
SB2024100827
and 32 more
#VU97745 - Improper input validation
CVE-2024-47175		 CWE-20 High
Available
No
 - 27.09.2024 SB2024092719
SB2024092722
SB2024092723
and 50 more
#VU97217 - Resource exhaustion
CVE-2024-34158		 CWE-400 Medium
No
No
 - 12.09.2024 SB2024091261
SB2024091264
SB2024091265
and 76 more
#VU97216 - Resource exhaustion
CVE-2024-34156		 CWE-400 Medium
No
No
 - 12.09.2024 SB2024091261
SB2024091264
SB2024091265
and 143 more
#VU97215 - Resource exhaustion
CVE-2024-34155		 CWE-400 Medium
No
No
 - 12.09.2024 SB2024091261
SB2024091264
SB2024091265
and 81 more
#VU96745 - Incorrect Regular Expression
CVE-2024-6232		 CWE-185 Medium
No
No
 - 03.09.2024 SB2024090377
SB2024090927
SB2024091048
and 145 more
#VU96642 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-43788		 CWE-79 Low
No
No
 - 30.08.2024 SB2024083026
SB2024100824
SB2024100825
and 21 more
#VU95571 - Command injection
CVE-2024-6923		 CWE-77 Medium
No
No
 - 08.08.2024 SB2024080861
SB2024080862
SB2024080863
and 144 more
#VU95157 - Incorrect Provision of Specified Functionality
CVE-2024-4032		 CWE-684 Medium
No
No
 - 02.08.2024 SB2024080203
SB2024080207
SB2024080209
and 101 more
#VU93424 - Out-of-bounds read
CVE-2024-5535		 CWE-125 Low
Available
No
 - 27.06.2024 SB2024062720
SB20240717135
SB2024072154
and 157 more
#VU93118 - Use of Potentially Dangerous Function
CVE-2024-39331		 CWE-676 High
No
No
 - 24.06.2024 SB2024062429
SB2024062430
SB2024062431
and 46 more
#VU90156 - Security Features
CVE-2024-35195		 CWE-254 Low
No
No
 - 31.05.2024 SB2024053174
SB2024053188
SB2024053192
and 117 more
#VU87808 - Insufficient Verification of Data Authenticity
CVE-2024-30203		 CWE-345 High
No
No
 - 26.03.2024 SB2024032628
SB2024032629
SB2024032630
and 30 more
#VU87804 - Insufficient Verification of Data Authenticity
CVE-2024-30205		 CWE-345 High
No
No
 - 26.03.2024 SB2024032628
SB2024032629
SB2024032630
and 32 more
#VU87208 - Out-of-bounds read
CVE-2023-48161		 CWE-125 Medium
No
No
 - 07.03.2024 SB2024030740
SB2024030741
SB2024060719
and 28 more


Showing elements 21 - 40 out of 156