Known vulnerabilities in Multicluster Engine for Kubernetes - page 5
Vendor:
Red Hat Inc.
Software:
Multicluster Engine for Kubernetes
Software CPE:
cpe:2.3:a:red_hat:multicluster_engine_for_kubernetes:*:*:*:*:*:*:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
224
Public exploits:
15
Known exploited (KEV):
4
Highest CVSSv4 Score:
9.4
Breakdown by Severity Chart
2.10.4
2.6.12
2.8.8
2.17.0
2.8.7
2.11.2
2.10.3
2.9.4
2.6.11
2.8.6
2.11
2.11.1
2.10.2
2.7.10
2.9
2.10
2.10.1
2.8
2.8.4
2.6
2.7
2.9.1
2.7.6
2.8.3
2.6.8
2.7.5
2.4.9
2.6.7
2.5.9
2.7.4
2.8.1
2.6.5
2.7.3
2.5.8
2.4.7
2.6.4
2.7.2
2.3.8
2.4.6
2.6.3
2.5.7
2.2.9
2.2.8
2.1.9
2.3.3
2.3.2
2.1.8
2.3.1
2.3.0
2.2.7
2.2.6
2.2.5
2.0.9
2.1.7
2.2.4
2.0.8
2.1.6
2.1.5
2.1.4
2.1.3
2.1.2
2.0.7
2.0.6
2.0.5
2.0.4
2.0.3
2.2.3
2.2.2
2.2.1
2.2.0
2.0.2
2.0.1
2.1.1
2.1
2.0
Vulnerabilities (224)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU100997 - Insecure Storage of Sensitive Information CVE-2024-10041 |
CWE-922 | Low | 2.4.7, 2.7.2 | 27.11.2024 |
SB2024112540 SB2024112747 SB2024112748 and 38 more |
||
| #VU100922 - Inefficient Regular Expression Complexity CVE-2024-45813 |
CWE-1333 | Medium | 2.6.4, 2.7.2 | 26.11.2024 |
SB2024112628 SB2024112636 SB2024120575 and 4 more |
||
| #VU100912 - Improper Authentication CVE-2024-10963 |
CWE-287 | Medium | 2.4.7, 2.5.8, 2.6.4, 2.6.7, 2.7.2, 2.7.4 | 25.11.2024 |
SB2024112540 SB2024112541 SB2024112542 and 56 more |
||
| #VU98828 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2024-9675 |
CWE-22 | Low | 2.3.8, 2.6.4 | 21.10.2024 |
SB2024102103 SB2024102104 SB2024102107 and 51 more |
||
| #VU98132 - Inefficient Regular Expression Complexity CVE-2024-45296 |
CWE-1333 | Low | 2.6.4, 2.7.2 | 08.10.2024 |
SB2024100822 SB2024100823 SB2024100826 and 87 more |
||
| #VU96744 - Type confusion CVE-2024-6119 |
CWE-843 | Medium | 2.7.2 | 03.09.2024 |
SB2024090364 SB2024090365 SB2024090384 and 99 more |
||
| #VU94063 - Use of a Broken or Risky Cryptographic Algorithm CVE-2024-3596 |
CWE-327 | Medium | 2.3.8, 2.4.7, 2.5.8, 2.6.4, 2.6.7, 2.7.2, 2.7.4 | 10.07.2024 |
SB2024071018 SB2024071019 SB2024071020 and 114 more |
||
| #VU89861 - Use After Free CVE-2024-4741 |
CWE-416 | Medium | 2.5.8, 2.6.4, 2.7.4 | 29.05.2024 |
SB2024052912 SB2024060803 SB2024060804 and 87 more |
||
| #VU89624 - Resource Management Errors CVE-2024-4603 |
CWE-399 | Low | 2.5.8, 2.6.4, 2.7.4 | 17.05.2024 |
SB2024051715 SB2024052732 SB2024060735 and 65 more |
||
| #VU89351 - Insufficient Verification of Data Authenticity CVE-2024-34397 |
CWE-345 | Low | 2.5.8, 2.6.4, 2.6.7, 2.7.2, 2.7.4 | 10.05.2024 |
SB2024051042 SB2024051043 SB2024051044 and 88 more |
||
| #VU88144 - Improper input validation CVE-2024-28182 |
CWE-20 | Medium | 2.4.6, 2.7.2 | 04.04.2024 |
SB2024040442 SB2024040443 SB2024040444 and 124 more |
||
| #VU87850 - Missing Release of Resource after Effective Lifetime CVE-2024-2398 |
CWE-772 | Medium | 2.3.8, 2.4.6, 2.7.2 | 27.03.2024 |
SB2024032713 SB2024032740 SB2024032744 and 106 more |
||
| #VU87672 - Improper input validation CVE-2024-28835 |
CWE-20 | Medium | 2.5.8, 2.6.4, 2.6.7, 2.7.2, 2.7.4 | 20.03.2024 |
SB2024032057 SB2024032058 SB2024032059 and 71 more |
||
| #VU87671 - Cryptographic Issues CVE-2024-28834 |
CWE-310 | Medium | 2.5.8, 2.6.4, 2.6.7, 2.7.2, 2.7.4 | 20.03.2024 |
SB2024032057 SB2024032058 SB2024032059 and 111 more |
||
| #VU86052 - Use After Free CVE-2024-25062 |
CWE-416 | High | 2.4.6, 2.5.8, 2.6.4, 2.7.2 | 05.02.2024 |
SB2024020507 SB2024020508 SB2024020742 and 115 more |
||
| #VU84985 - Out-of-bounds read CVE-2023-7104 |
CWE-125 | Medium | 2.5.8, 2.6.4, 2.6.7, 2.7.2, 2.7.4 | 04.01.2024 |
SB2024010417 SB2024010420 SB2024010516 and 107 more |
||
| #VU84507 - Resource exhaustion CVE-2023-47108 |
CWE-400 | Medium | 2.6.4, 2.7.2 | 18.12.2023 |
SB2023121825 SB2023122137 SB2024010436 and 55 more |
||
| #VU80421 - Out-of-bounds read CVE-2022-48554 |
CWE-125 | Low | 2.5.8, 2.6.4, 2.6.7, 2.7.2, 2.7.4 | 05.09.2023 |
SB2023090535 SB2023090536 SB2023091257 and 52 more |
||
| #VU79296 - Insufficient Verification of Data Authenticity CVE-2023-37920 |
CWE-345 | Medium | 2.3.8, 2.4.6, 2.5.8, 2.6.4, 2.6.7, 2.7.2, 2.7.4 | 09.08.2023 |
SB2023080939 SB20230821166 SB2023090820 and 89 more |
||
| #VU63553 - Integer overflow CVE-2021-43618 |
CWE-190 | Medium | 2.5.8, 2.6.4, 2.6.7, 2.7.2, 2.7.4 | 24.05.2022 |
SB2021121654 SB2022052401 SB2021120223 and 85 more |
Showing elements 81 - 100 out of 224