Known vulnerabilities in Migration Toolkit for Containers 1.7.7 - page 8

Vendor: Red Hat Inc.
Software: Migration Toolkit for Containers
Version: 1.7.7
Software CPE: cpe:2.3:a:red_hat:migration_toolkit_for_containers:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 156
Public exploits: 11
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Migration Toolkit for Containers version 1.7.7 Migration Toolkit for Containers 1.7.7 is affected by 156 vulnerabilities: 1 critical, 26 high, 92 medium, 37 low Critical High Medium Low

Vulnerabilities (156)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU73970 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-48285		 CWE-22 Medium
No
No
 1.7.8 23.03.2023 SB2023032314
SB2023032315
SB2023042510
and 22 more
#VU73969 - Incorrect Regular Expression
CVE-2022-25927		 CWE-185 Medium
No
No
 1.7.8 23.03.2023 SB2023032313
SB2023032315
SB2023032710
and 19 more
#VU72755 - Improper input validation
CVE-2020-36567		 CWE-20 Medium
No
No
 1.7.8 03.03.2023 SB2023030346
SB2023030347
SB2023032315
and 1 more
#VU72750 - Inefficient Algorithmic Complexity
CVE-2022-25881		 CWE-407 Medium
No
No
 1.7.8 03.03.2023 SB2023030326
SB2023030328
SB2023031112
and 61 more
#VU72247 - Improper input validation
CVE-2022-38900		 CWE-20 Medium
No
No
 1.7.8 15.02.2023 SB2023021531
SB2023022714
SB2023032315
and 35 more
#VU71577 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-46175		 CWE-94 Medium
No
No
 1.7.8 26.01.2023 SB2023012644
SB2023012645
SB2023013117
and 44 more
#VU71364 - Improper Access Control
CVE-2022-3162		 CWE-284 Low
No
No
 1.7.7, 1.7.8 19.01.2023 SB2023011938
SB2023011939
SB2023020908
and 17 more
#VU71361 - Resource exhaustion
CVE-2021-4235		 CWE-400 Medium
No
No
 1.7.7, 1.7.8 19.01.2023 SB2023011937
SB2023011939
SB2023020869
and 13 more
#VU70121 - Incorrect Regular Expression
CVE-2022-37603		 CWE-185 Medium
No
No
 1.7.8 12.12.2022 SB2022121221
SB2022121222
SB2023010418
and 29 more
#VU69675 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-24999		 CWE-94 Medium
Public exploit available
No
 1.7.8 29.11.2022 SB2022112910
SB2022112911
SB2022112943
and 49 more
#VU68389 - Improper input validation
CVE-2022-2880		 CWE-20 Medium
No
No
 1.7.7, 1.7.8, 1.7.10 18.10.2022 SB2022101833
SB2022101834
SB2022102005
and 94 more
#VU68387 - Resource Management Errors
CVE-2022-2879		 CWE-399 Medium
No
No
 1.7.7, 1.7.8 18.10.2022 SB2022101833
SB2022101834
SB2022102005
and 78 more
#VU67760 - Type conversion
CVE-2020-10735		 CWE-704 Medium
No
No
 1.7.8 29.09.2022 SB2022092968
SB2022092970
SB2022093032
and 86 more
#VU67591 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2021-28861		 CWE-601 Low
No
No
 1.7.8 22.09.2022 SB2022092243
SB2022092244
SB2022093032
and 76 more
#VU66817 - Improper Access Control
CVE-2022-2995		 CWE-284 Low
No
No
 1.7.7, 1.7.8 30.08.2022 SB2022083001
SB2023011939
SB2023020908
and 11 more
#VU66064 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-1705		 CWE-444 Medium
No
No
 1.7.6, 1.7.8 03.08.2022 SB2022080321
SB2022080323
SB2022080324
and 86 more


Showing elements 141 - 160 out of 156