Known vulnerabilities in Cryostat - page 6

Vendor: Red Hat Inc.
Software: Cryostat
Software CPE: cpe:2.3:a:red_hat:cryostat:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 156
Public exploits: 11
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Cryostat Cryostat is affected by 156 known vulnerabilities: 22 high, 94 medium, 40 low Critical High Medium Low

Vulnerabilities (156)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU85267 - Covert Timing Channel
CVE-2023-5388		 CWE-385 Medium
No
No
 - 10.01.2024 SB2024011031
SB2024011042
SB2024011043
and 96 more
#VU84985 - Out-of-bounds read
CVE-2023-7104		 CWE-125 Medium
No
No
 - 04.01.2024 SB2024010417
SB2024010420
SB2024010516
and 108 more
#VU83928 - Resource exhaustion
CVE-2023-39326		 CWE-400 Medium
No
No
 - 06.12.2023 SB2023120641
SB2023121133
SB2023121156
and 90 more
#VU83316 - Information Exposure Through Timing Discrepancy
CVE-2023-5981		 CWE-208 Medium
No
No
 - 20.11.2023 SB2023112075
SB2023112145
SB2023120164
and 79 more
#VU82980 - Improper input validation
CVE-2023-27043		 CWE-20 Medium
No
No
 - 10.11.2023 SB2023041957
SB2023111064
SB2023111315
and 120 more
#VU82894 - Resource Management Errors
CVE-2023-5678		 CWE-399 Medium
No
No
 - 07.11.2023 SB20231107122
SB2023112047
SB2023112048
and 147 more
#VU81447 - Use After Free
CVE-2023-4806		 CWE-416 Medium
No
No
 - 03.10.2023 SB2023100363
SB2023100402
SB2023100418
and 97 more
#VU80801 - Exposure of sensitive information to an unauthorized actor
CVE-2023-4641		 CWE-200 Low
No
No
 2.4.0 14.09.2023 SB2023091453
SB2023091455
SB2023101019
and 66 more
#VU79113 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-3468		 CWE-835 Low
No
No
 - 08.08.2023 SB2023080805
SB20231018146
SB2023112310
and 24 more
#VU78798 - Resource Management Errors
CVE-2023-3817		 CWE-399 Low
No
No
 - 31.07.2023 SB2023073153
SB2023080268
SB2023080438
and 158 more
#VU78463 - Resource Management Errors
CVE-2023-3446		 CWE-399 Medium
No
No
 - 20.07.2023 SB2023072079
SB2023072524
SB2023072525
and 152 more
#VU78328 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2023-33201		 CWE-90 Medium
No
No
 2.4.0 17.07.2023 SB2023071740
SB2023071742
SB2023071902
and 91 more
#VU77652 - Improper Authentication
CVE-2023-3128		 CWE-287 High
No
No
 2.4.0 22.06.2023 SB2023062281
SB2023071336
SB20230720114
and 15 more
#VU77643 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2023-24815		 CWE-22 Medium
No
No
 2.4.0 22.06.2023 SB2023062269
SB2023062321
SB2023090722
and 4 more
#VU77641 - Use After Free
CVE-2023-34241		 CWE-416 Medium
No
No
 2.4.0 22.06.2023 SB2023062261
SB2023062272
SB2023062276
and 36 more
#VU77573 - Resource exhaustion
CVE-2023-34462		 CWE-400 Medium
No
No
 2.4.0 20.06.2023 SB2023062026
SB2023072521
SB2023072539
and 98 more
#VU76761 - Heap-based Buffer Overflow
CVE-2023-32324		 CWE-122 Medium
No
No
 2.4.0 01.06.2023 SB2023060132
SB2023060133
SB2023060136
and 33 more
#VU75444 - Improper input validation
CVE-2023-1981		 CWE-20 Low
No
No
 2.4.0 24.04.2023 SB2023042420
SB2023042421
SB2023042548
and 23 more
#VU71458 - Memory corruption
CVE-2023-22745		 CWE-119 High
No
No
 2.4.0 24.01.2023 SB2023012404
SB2023022749
SB2023030333
and 42 more
#VU67583 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2007-4559		 CWE-22 High
Available
No
 2.4.0 22.09.2022 SB2007082801
SB2022120206
SB2023060825
and 68 more


Showing elements 101 - 120 out of 156