Known vulnerabilities in Multicluster Engine for Kubernetes - page 5
Vendor:
Red Hat Inc.
Software:
Multicluster Engine for Kubernetes
Software CPE:
cpe:2.3:a:red_hat:multicluster_engine_for_kubernetes:*:*:*:*:*:*:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
224
Public exploits:
15
Known exploited (KEV):
4
Breakdown by Severity Chart
2.10.4
2.6.12
2.8.8
2.17.0
2.8.7
2.11.2
2.10.3
2.9.4
2.6.11
2.8.6
2.11
2.11.1
2.10.2
2.7.10
2.9
2.10
2.10.1
2.8
2.8.4
2.6
2.7
2.9.1
2.7.6
2.8.3
2.6.8
2.7.5
2.4.9
2.6.7
2.5.9
2.7.4
2.8.1
2.6.5
2.7.3
2.5.8
2.4.7
2.6.4
2.7.2
2.3.8
2.4.6
2.6.3
2.5.7
2.2.9
2.2.8
2.1.9
2.3.3
2.3.2
2.1.8
2.3.1
2.3.0
2.2.7
2.2.6
2.2.5
2.0.9
2.1.7
2.2.4
2.0.8
2.1.6
2.1.5
2.1.4
2.1.3
2.1.2
2.0.7
2.0.6
2.0.5
2.0.4
2.0.3
2.2.3
2.2.2
2.2.1
2.2.0
2.0.2
2.0.1
2.1.1
2.1
2.0
Vulnerabilities (224)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU105450 - Resource exhaustion CVE-2025-27144 |
CWE-400 | Medium | 2.7.4, 2.8.1 | 07.03.2025 |
SB2025030735 SB2025030736 SB2025030737 and 80 more |
||
| #VU102463 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2024-55565 |
CWE-835 | Medium | 2.6.5, 2.7.3 | 08.01.2025 |
SB2025010849 SB2025010851 SB2025010853 and 45 more |
||
| #VU101868 - Resource exhaustion CVE-2024-45338 |
CWE-400 | Medium | 2.4.7, 2.6.5 | 19.12.2024 |
SB2024121932 SB2024123101 SB2025010619 and 137 more |
||
| #VU101777 - Improper Authorization CVE-2024-45337 |
CWE-285 | Medium | 2.4.7, 2.5.8, 2.6.5, 2.7.3 | 13.12.2024 |
SB2024121332 SB2024121333 SB2024121334 and 93 more |
||
| #VU99614 - Improper input validation CVE-2024-50602 |
CWE-20 | Medium | 2.3.8, 2.4.7, 2.5.8, 2.6.4 | 01.11.2024 |
SB2024110155 SB2024110182 SB2024110534 and 98 more |
||
| #VU97216 - Resource exhaustion CVE-2024-34156 |
CWE-400 | Medium | 2.3.8, 2.7.3 | 12.09.2024 |
SB2024091261 SB2024091264 SB2024091265 and 143 more |
||
| #VU96745 - Incorrect Regular Expression CVE-2024-6232 |
CWE-185 | Medium | 2.3.8, 2.4.6, 2.5.8, 2.6.3, 2.6.4 | 03.09.2024 |
SB2024090377 SB2024090927 SB2024091048 and 145 more |
||
| #VU93424 - Out-of-bounds read CVE-2024-5535 |
CWE-125 | Low | 2.3.8, 2.4.6, 2.4.7, 2.5.8, 2.6.4, 2.7.4 | 27.06.2024 |
SB2024062720 SB20240717135 SB2024072154 and 157 more |
||
| #VU89861 - Use After Free CVE-2024-4741 |
CWE-416 | Medium | 2.5.8, 2.6.4, 2.7.4 | 29.05.2024 |
SB2024052912 SB2024060803 SB2024060804 and 89 more |
||
| #VU89624 - Resource Management Errors CVE-2024-4603 |
CWE-399 | Low | 2.5.8, 2.6.4, 2.7.4 | 17.05.2024 |
SB2024051715 SB2024052732 SB2024060735 and 65 more |
||
| #VU88828 - Resource exhaustion CVE-2024-3651 |
CWE-400 | Medium | 2.4.6, 2.5.8, 2.6.4 | 19.04.2024 |
SB2024041905 SB2024041906 SB2024041907 and 112 more |
||
| #VU86707 - Server-Side Request Forgery (SSRF) CVE-2024-24806 |
CWE-918 | Medium | 2.4.6, 2.5.8 | 22.02.2024 |
SB2024022210 SB2024022214 SB2024022225 and 54 more |
||
| #VU86052 - Use After Free CVE-2024-25062 |
CWE-416 | High | 2.4.6, 2.5.8, 2.6.4, 2.7.2 | 05.02.2024 |
SB2024020507 SB2024020508 SB2024020742 and 115 more |
||
| #VU83508 - Off-by-one Error CVE-2023-47038 |
CWE-193 | High | 2.5.8 | 27.11.2023 |
SB2023112761 SB2023112763 SB2023112959 and 33 more |
||
| #VU76757 - Missing release of memory after effective lifetime CVE-2023-2602 |
CWE-401 | Medium | 2.1.8, 2.2.7, 2.5.8 | 01.06.2023 |
SB2023060126 SB2023061452 SB2023070343 and 74 more |
||
| #VU72703 - Improper Control of Filename for Include/Require Statement in PHP Program CVE-2023-2603 |
CWE-98 | High | 2.1.8, 2.2.7, 2.5.8 | 01.03.2023 |
SB2023030118 SB2023060126 SB2023061452 and 87 more |
||
| #VU69582 - NULL Pointer Dereference CVE-2022-36227 |
CWE-476 | Low | 2.0.9, 2.1.7, 2.2.4, 2.5.8 | 24.11.2022 |
SB2022112432 SB2022112437 SB2022112438 and 77 more |
||
| #VU68858 - Off-by-one Error CVE-2021-46848 |
CWE-193 | Medium | 2.5.8 | 31.10.2022 |
SB2022103141 SB2022103142 SB2022103143 and 84 more |
||
| #VU63060 - Heap-based Buffer Overflow CVE-2021-3903 |
CWE-122 | High | 2.5.8, 2.6.4 | 11.05.2022 |
SB2022051173 SB2021111514 SB2022062022 and 39 more |
||
| #VU62002 - Improper input validation CVE-2022-1271 |
CWE-20 | High | 2.5.8 | 08.04.2022 |
SB2022040803 SB2022040804 SB2022040822 and 134 more |
Showing elements 81 - 100 out of 224