Known vulnerabilities in Migration Toolkit for Runtimes - page 7

Vendor: Red Hat Inc.
Software: Migration Toolkit for Runtimes
Software CPE: cpe:2.3:a:red_hat:mtr:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 203
Public exploits: 13
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Migration Toolkit for Runtimes Migration Toolkit for Runtimes is affected by 203 known vulnerabilities: 42 high, 105 medium, 56 low Critical High Medium Low

Vulnerabilities (203)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU75915 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-2491		 CWE-78 High
No
No
 1.1.1 09.05.2023 SB20230509106
SB2023051666
SB2023042426
and 17 more
#VU75264 - Improper input validation
CVE-2023-21939		 CWE-20 Medium
Available
No
 1.1.0 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 179 more
#VU75265 - Improper input validation
CVE-2023-21938		 CWE-20 Low
No
No
 1.1.0 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 181 more
#VU75266 - Improper input validation
CVE-2023-21968		 CWE-20 Low
No
No
 1.1.0 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 179 more
#VU75267 - Improper input validation
CVE-2023-21937		 CWE-20 Low
No
No
 1.1.0 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 184 more
#VU75260 - Improper input validation
CVE-2023-21930		 CWE-20 Medium
No
No
 1.1.0 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 191 more
#VU75261 - Improper input validation
CVE-2023-21967		 CWE-20 Medium
No
No
 1.1.0 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 189 more
#VU75262 - Improper input validation
CVE-2023-21954		 CWE-20 Medium
No
No
 1.1.0 18.04.2023 SB20230418166
SB20230418167
SB2023041942
and 166 more
#VU74578 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-28617		 CWE-78 High
No
No
 1.1.0 06.04.2023 SB2023040682
SB2023040684
SB2023042105
and 20 more
#VU73828 - State Issues
CVE-2023-27535		 CWE-371 Low
No
No
 1.1.0, 1.1.1 20.03.2023 SB2023032027
SB2023032028
SB2023032044
and 84 more
#VU72125 - Inadequate Encryption Strength
CVE-2023-0361		 CWE-326 Medium
No
No
 1.1.0, 1.1.1 11.02.2023 SB2023021103
SB2023021109
SB2023021561
and 88 more
#VU71287 - Improper input validation
CVE-2023-21835		 CWE-20 Medium
No
No
 1.0.2 17.01.2023 SB2023011784
SB2023011785
SB2023011882
and 67 more
#VU71289 - Improper input validation
CVE-2023-21843		 CWE-20 Low
No
No
 1.0.2 17.01.2023 SB2023011784
SB2023011785
SB2023011882
and 146 more
#VU70524 - Out-of-bounds write
CVE-2022-41854		 CWE-787 Medium
No
No
 1.1.0 28.12.2022 SB2022122813
SB2022122926
SB2023010417
and 52 more
#VU70118 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-41881		 CWE-835 Medium
No
No
 1.1.0 12.12.2022 SB2022121215
SB2023011210
SB2023011757
and 74 more
#VU69585 - Integer overflow
CVE-2022-3970		 CWE-190 High
No
No
 1.1.1 25.11.2022 SB2022112501
SB2022112507
SB2022112821
and 33 more
#VU69582 - NULL Pointer Dereference
CVE-2022-36227		 CWE-476 Low
No
No
 1.1.0, 1.1.1 24.11.2022 SB2022112432
SB2022112437
SB2022112438
and 77 more
#VU68820 - Out-of-bounds read
CVE-2022-2953		 CWE-125 Medium
No
No
 1.0.2 28.10.2022 SB2022102808
SB2022111719
SB2023011256
and 18 more
#VU68817 - Out-of-bounds write
CVE-2022-3627		 CWE-787 High
No
No
 1.1.1 28.10.2022 SB2022102808
SB2022111719
SB2022112821
and 24 more
#VU59148 - Deserialization of Untrusted Data
CVE-2021-46877		 CWE-502 Medium
No
No
 1.1.0 03.01.2022 SB2022010326
SB2022010327
SB2022062734
and 37 more


Showing elements 121 - 140 out of 203