Known vulnerabilities in openshift-kuryr (Red Hat package) - page 10

Software CPE: cpe:2.3:o:red_hat:openshift-kuryr_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Total vulnerabilities: 197
Public exploits: 15
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting openshift-kuryr (Red Hat package) openshift-kuryr (Red Hat package) is affected by 197 known vulnerabilities: 17 high, 113 medium, 67 low Critical High Medium Low

Vulnerabilities (197)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU26474 - Uncontrolled Memory Allocation
CVE-2020-8552
CWE-789 Medium
No
No
4.3.9-202003230116.git.0.9f1e22e.el8 31.03.2020 SB2020033111
SB2020040174
SB2020042251
and 6 more
#VU26393 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-2163
CWE-79 Low
No
No
4.3.25-202006081518.git.1.240b401.el8, 4.4.0-202006080017.git.1.855ef1d.el8 26.03.2020 SB2020032622
SB2020032668
SB2020061738
and 1 more
#VU26392 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-2162
CWE-79 Low
No
No
4.3.25-202006081518.git.1.240b401.el8, 4.4.0-202006080017.git.1.855ef1d.el8 26.03.2020 SB2020032622
SB2020032667
SB2020061738
and 1 more
#VU26391 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-2161
CWE-79 Low
No
No
4.3.25-202006081518.git.1.240b401.el8, 4.4.0-202006080017.git.1.855ef1d.el8 26.03.2020 SB2020032622
SB2020032662
SB2020061738
and 1 more
#VU26390 - Cross-Site Request Forgery (CSRF)
CVE-2020-2160
CWE-352 Low
No
No
4.3.25-202006081518.git.1.240b401.el8, 4.4.0-202006080017.git.1.855ef1d.el8 26.03.2020 SB2020032622
SB2020032661
SB2020061738
and 1 more
#VU25501 - Use After Free
CVE-2020-8945
CWE-416 High
No
No
4.3.10-202003300855.git.0.07e6ba6.el8 21.02.2020 SB2020022110
SB2020031116
SB2020031126
and 23 more
#VU25458 - Heap-based Buffer Overflow
CVE-2020-7039
CWE-122 Low
No
No
4.3.1-202002031701.git.1.cfa4a05.el8 19.02.2020 SB2020021912
SB2020031117
SB2020031053
and 25 more
#VU25457 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2020-7211
CWE-22 Low
No
No
4.3.1-202002031701.git.1.cfa4a05.el8 19.02.2020 SB2020021912
SB2020021193
#VU24764 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2020-2105
CWE-451 Low
No
No
4.3.5-202003020117.git.0.237579a.el8 30.01.2020 SB2020013005
SB20200310153
#VU24763 - Exposure of sensitive information to an unauthorized actor
CVE-2020-2104
CWE-200 Low
No
No
4.3.5-202003020117.git.0.237579a.el8 30.01.2020 SB2020013005
SB20200310153
#VU24762 - Exposure of sensitive information to an unauthorized actor
CVE-2020-2103
CWE-200 Low
No
No
4.3.5-202003020117.git.0.237579a.el8 30.01.2020 SB2020013005
SB20200310153
#VU24761 - Cryptographic Issues
CVE-2020-2102
CWE-310 Medium
No
No
4.3.5-202003020117.git.0.237579a.el8 30.01.2020 SB2020013005
SB20200310153
#VU24760 - Exposure of sensitive information to an unauthorized actor
CVE-2020-2101
CWE-200 Medium
No
No
4.3.5-202003020117.git.0.237579a.el8 30.01.2020 SB2020013005
SB20200310153
#VU24759 - Resource Management Errors
CVE-2020-2100
CWE-399 Medium
No
No
4.3.5-202003020117.git.0.237579a.el8 30.01.2020 SB2020013005
SB20200310153
#VU24758 - Improper Authentication
CVE-2020-2099
CWE-287 High
No
No
4.3.5-202003020117.git.0.237579a.el8 30.01.2020 SB2020013004
SB20200310153
#VU21780 - Improper Certificate Validation
CVE-2019-11324
CWE-295 Medium
Available
No
4.3.28-202006270952.p0.git.1632.9e3ea83.el8, 4.4.0-202006271254.p0.git.1811.c15bfa2.el8 15.10.2019 SB2019041823
SB2020031827
SB2019091504
and 19 more
#VU21118 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2019-10392
CWE-78 Medium
No
No
4.2.20-202002140432.git.1.d9a72a5.el7, 4.3.3-202002170501.git.1.3b8b4cc.el8 16.09.2019 SB2019091607
SB2020061842
SB2020022451
and 2 more


Showing elements 181 - 200 out of 197