Known vulnerabilities in Cryostat - page 3

Vendor: Red Hat Inc.
Software: Cryostat
Software CPE: cpe:2.3:a:red_hat:cryostat:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 156
Public exploits: 11
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cryostat Cryostat is affected by 156 known vulnerabilities: 22 high, 94 medium, 40 low Critical High Medium Low

Vulnerabilities (156)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU96899 - Integer overflow
CVE-2024-45492		 CWE-190 High
No
No
 - 05.09.2024 SB20240905100
SB20240905101
SB20240905102
and 108 more
#VU96898 - Integer overflow
CVE-2024-45491		 CWE-190 High
No
No
 - 05.09.2024 SB20240905100
SB20240905101
SB20240905102
and 106 more
#VU96897 - Buffer Underwrite ('Buffer Underflow')
CVE-2024-45490		 CWE-124 High
No
No
 - 05.09.2024 SB20240905100
SB20240905101
SB20240905102
and 113 more
#VU94555 - Improper input validation
CVE-2024-21147		 CWE-20 Medium
No
No
 - 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 123 more
#VU94556 - Improper input validation
CVE-2024-21145		 CWE-20 Medium
No
No
 - 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 130 more
#VU94557 - Improper input validation
CVE-2024-21140		 CWE-20 Medium
No
No
 - 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 119 more
#VU94559 - Improper input validation
CVE-2024-21131		 CWE-20 Low
No
No
 - 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 135 more
#VU94560 - Improper input validation
CVE-2024-21138		 CWE-20 Low
No
No
 - 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 117 more
#VU93850 - Resource exhaustion
CVE-2024-24791		 CWE-400 Medium
No
No
 - 07.07.2024 SB2024070727
SB2024070728
SB2024070729
and 86 more
#VU93519 - Out-of-bounds read
CVE-2024-37371		 CWE-125 Medium
No
No
 - 01.07.2024 SB2024070148
SB2024070491
SB2024070496
and 114 more
#VU93518 - Improper input validation
CVE-2024-37370		 CWE-20 Medium
No
No
 - 01.07.2024 SB2024070148
SB2024070491
SB2024070496
and 96 more
#VU92262 - Exposure of sensitive information to an unauthorized actor
CVE-2024-37891		 CWE-200 Low
No
No
 - 19.06.2024 SB2024061955
SB20240625146
SB2024062605
and 194 more
#VU91160 - Improper input validation
CVE-2024-24790		 CWE-20 Medium
No
No
 - 05.06.2024 SB2024060520
SB2024060635
SB2024060729
and 90 more
#VU91159 - Improper input validation
CVE-2024-24789		 CWE-20 Low
No
No
 - 05.06.2024 SB2024060520
SB2024060635
SB2024060729
and 78 more
#VU89296 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-24788		 CWE-835 Medium
No
No
 - 09.05.2024 SB2024050936
SB2024050937
SB2024051029
and 43 more
#VU88828 - Resource exhaustion
CVE-2024-3651		 CWE-400 Medium
No
No
 - 19.04.2024 SB2024041905
SB2024041906
SB2024041907
and 112 more
#VU88144 - Improper input validation
CVE-2024-28182		 CWE-20 Medium
No
No
 - 04.04.2024 SB2024040442
SB2024040443
SB2024040444
and 124 more
#VU86885 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-48624		 CWE-78 Medium
No
No
 - 28.02.2024 SB2024022820
SB2024022839
SB2024030503
and 60 more
#VU86707 - Server-Side Request Forgery (SSRF)
CVE-2024-24806		 CWE-918 Medium
No
No
 - 22.02.2024 SB2024022210
SB2024022214
SB2024022225
and 54 more
#VU77252 - NULL Pointer Dereference
CVE-2023-2953		 CWE-476 Medium
No
No
 - 13.06.2023 SB2023061366
SB2023061417
SB2023061418
and 59 more


Showing elements 41 - 60 out of 156