Known vulnerabilities in openshift-clients (Red Hat package) - page 11

Vendor: Red Hat Inc.
Software: openshift-clients (Red Hat package)
Software CPE: cpe:2.3:o:red_hat:openshift-clients_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 233
Public exploits: 19
Known exploited (KEV): 3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting openshift-clients (Red Hat package) openshift-clients (Red Hat package) is affected by 233 known vulnerabilities: 13 high, 149 medium, 71 low Critical High Medium Low

Vulnerabilities (233)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU56902 - Permissions, Privileges, and Access Controls
CVE-2021-25741		 CWE-264 Medium
Available
No
 4.8.0-202109201328.p0.git.88e7eba.assembly.stream.el7, 4.8.0-202109201328.p0.git.88e7eba.assembly.stream.el8 28.09.2021 SB2021092804
SB2021092805
SB2021092913
and 8 more
#VU55642 - Insufficient Session Expiration
CVE-2021-34428		 CWE-613 Low
No
No
 4.9.0-202109101042.p0.git.96e95ce.assembly.stream.el8 08.08.2021 SB2021080801
SB2021080803
SB2021081922
and 25 more
#VU55143 - Integer overflow
CVE-2021-33909		 CWE-190 Low
Available
No
 4.7.0-202107070256.p0.git.8b4b094.assembly.stream.el7, 4.7.0-202107070256.p0.git.8b4b094.assembly.stream.el8 21.07.2021 SB2021072106
SB2021072222
SB2021072223
and 63 more
#VU55034 - Uncontrolled Memory Allocation
CVE-2021-33910		 CWE-789 Low
Available
No
 4.7.0-202107070256.p0.git.8b4b094.assembly.stream.el7, 4.7.0-202107070256.p0.git.8b4b094.assembly.stream.el8 20.07.2021 SB2021072031
SB2021072032
SB2021072206
and 31 more
#VU55006 - Use After Free
CVE-2021-36980		 CWE-416 High
No
No
 4.9.0-202109101042.p0.git.96e95ce.assembly.stream.el8 20.07.2021 SB2021072016
SB2021072017
SB2021102110
and 15 more
#VU54492 - Session Fixation
CVE-2021-21671		 CWE-384 Medium
No
No
 4.6.0-202108202025.p0.git.2b525e8.assembly.stream.el7, 4.6.0-202108202025.p0.git.2b525e8.assembly.stream.el8 01.07.2021 SB2021070108
SB2021070116
SB2021092808
and 3 more
#VU54491 - Permissions, Privileges, and Access Controls
CVE-2021-21670		 CWE-264 Low
No
No
 4.6.0-202108202025.p0.git.2b525e8.assembly.stream.el7, 4.6.0-202108202025.p0.git.2b525e8.assembly.stream.el8 01.07.2021 SB2021070108
SB2021070116
SB2021092808
and 3 more
#VU53973 - Improper input validation
CVE-2021-28169		 CWE-20 Medium
No
No
 4.9.0-202109101042.p0.git.96e95ce.assembly.stream.el8 09.06.2021 SB2021060910
SB2021061815
SB2021081922
and 36 more
#VU53837 - Permissions, Privileges, and Access Controls
CVE-2021-3560		 CWE-264 Low
Available
Exploited
 4.7.0-202106252127.p0.git.8b4b094.el7, 4.7.0-202106252127.p0.git.8b4b094.el8 07.06.2021 SB2021060707
SB2021060712
SB2021060714
and 18 more
#VU53609 - Improper input validation
CVE-2021-25217		 CWE-20 Medium
No
No
 4.7.0-202106252127.p0.git.8b4b094.el7, 4.7.0-202106252127.p0.git.8b4b094.el8 27.05.2021 SB2021052708
SB2021052808
SB2021052902
and 38 more
#VU52502 - Improper input validation
CVE-2020-27218		 CWE-20 Medium
No
No
 4.5.0-202106011407.p0.git.297a4ac.el7, 4.5.0-202106011407.p0.git.297a4ac.el8, 4.6.0-202106160917.p0.git.99556b6.el7, 4.6.0-202106160917.p0.git.99556b6.el8 23.04.2021 SB2021042305
SB2021042635
SB2021063002
and 15 more
#VU52495 - Permissions, Privileges, and Access Controls
CVE-2021-21645		 CWE-264 Low
No
No
 4.5.0-202106011407.p0.git.297a4ac.el7, 4.5.0-202106011407.p0.git.297a4ac.el8 22.04.2021 SB2021042205
SB2021060101
SB2021063033
and 3 more
#VU52494 - Cross-Site Request Forgery (CSRF)
CVE-2021-21644		 CWE-352 Low
No
No
 4.5.0-202106011407.p0.git.297a4ac.el7, 4.5.0-202106011407.p0.git.297a4ac.el8 22.04.2021 SB2021042205
SB2021060101
SB2021063033
and 3 more
#VU52493 - Permissions, Privileges, and Access Controls
CVE-2021-21643		 CWE-264 Low
No
No
 4.5.0-202106011407.p0.git.297a4ac.el7, 4.5.0-202106011407.p0.git.297a4ac.el8 22.04.2021 SB2021042205
SB2021060101
SB2021063033
and 3 more
#VU52492 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2021-21642		 CWE-611 Medium
No
No
 4.5.0-202106011407.p0.git.297a4ac.el7, 4.5.0-202106011407.p0.git.297a4ac.el8 22.04.2021 SB2021042205
SB2021060101
SB2021063033
and 3 more
#VU52385 - Improper input validation
CVE-2020-27223		 CWE-20 Medium
Available
No
 4.5.0-202106011407.p0.git.297a4ac.el7, 4.5.0-202106011407.p0.git.297a4ac.el8, 4.6.0-202106160917.p0.git.99556b6.el7, 4.6.0-202106160917.p0.git.99556b6.el8 21.04.2021 SB2021042107
SB2021063002
SB2021063034
and 19 more
#VU49527 - Exposure of sensitive information to an unauthorized actor
CVE-2021-21602		 CWE-200 Medium
No
No
 4.5.0-202102051529.p0.git.3612.61b096a.el7, 4.5.0-202102051529.p0.git.3612.61b096a.el8, 4.6.0-202102050644.p0.git.3831.1c61c6b.el7, 4.6.0-202102050644.p0.git.3831.1c61c6b.el8 13.01.2021 SB2021011418
SB2021011444
SB2021012106
and 2 more
#VU48942 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2020-27216		 CWE-362 Low
No
No
 4.5.0-202106011407.p0.git.297a4ac.el7, 4.5.0-202106011407.p0.git.297a4ac.el8, 4.6.0-202106160917.p0.git.99556b6.el7, 4.6.0-202106160917.p0.git.99556b6.el8 23.10.2020 SB2020121307
SB2020121308
SB2021012011
and 27 more
#VU27924 - Incorrect Default Permissions
CVE-2020-1945		 CWE-276 Low
No
No
 4.5.0-202102051529.p0.git.3612.61b096a.el7, 4.5.0-202102051529.p0.git.3612.61b096a.el8, 4.6.0-202102050644.p0.git.3831.1c61c6b.el7, 4.6.0-202102050644.p0.git.3831.1c61c6b.el8 15.05.2020 SB2020051501
SB2020052114
SB2020060205
and 49 more
#VU47428 - Permissions, Privileges, and Access Controls
CVE-2020-11979		 CWE-264 Low
No
No
 4.5.0-202102051529.p0.git.3612.61b096a.el7, 4.5.0-202102051529.p0.git.3612.61b096a.el8, 4.6.0-202102050644.p0.git.3831.1c61c6b.el7, 4.6.0-202102050644.p0.git.3831.1c61c6b.el8 14.05.2020 SB2020100804
SB2020100815
SB2020111614
and 51 more


Showing elements 201 - 220 out of 233