Known vulnerabilities in openshift-kuryr (Red Hat package) - page 9

Software CPE: cpe:2.3:o:red_hat:openshift-kuryr_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Total vulnerabilities: 198
Public exploits: 15
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting openshift-kuryr (Red Hat package) openshift-kuryr (Red Hat package) is affected by 198 known vulnerabilities: 17 high, 114 medium, 67 low Critical High Medium Low

Vulnerabilities (198)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU55143 - Integer overflow
CVE-2021-33909
CWE-190 Low
Available
No
4.7.0-202107070256.p0.git.c7654fb.assembly.stream.el8 21.07.2021 SB2021072106
SB2021072222
SB2021072223
and 63 more
#VU55034 - Uncontrolled Memory Allocation
CVE-2021-33910
CWE-789 Low
Available
No
4.7.0-202107070256.p0.git.c7654fb.assembly.stream.el8 20.07.2021 SB2021072031
SB2021072032
SB2021072206
and 31 more
#VU53837 - Permissions, Privileges, and Access Controls
CVE-2021-3560
CWE-264 Low
Available
Exploited
4.7.0-202106232224.p0.git.c7654fb.el8 07.06.2021 SB2021060707
SB2021060712
SB2021060714
and 18 more
#VU53609 - Improper input validation
CVE-2021-25217
CWE-20 Medium
No
No
4.7.0-202106232224.p0.git.c7654fb.el8 27.05.2021 SB2021052708
SB2021052808
SB2021052902
and 38 more
#VU53399 - Security Features
CVE-2021-30465
CWE-254 Low
No
No
3.11.452-1.git.c33a657.el7, 4.7.0-202105140104.p0.git.8b61936.el8 20.05.2021 SB2021052013
SB2021052014
SB2021052015
and 34 more
#VU52502 - Improper input validation
CVE-2020-27218
CWE-20 Medium
No
No
3.11.462-1.git.c33a657.el7, 4.5.0-202106011407.p0.git.75cc301.el8, 4.6.0-202106181055.p0.git.7feb5bd.el8 23.04.2021 SB2021042305
SB2021042635
SB2021063002
and 15 more
#VU52495 - Permissions, Privileges, and Access Controls
CVE-2021-21645
CWE-264 Low
No
No
3.11.462-1.git.c33a657.el7, 4.5.0-202106011407.p0.git.75cc301.el8 22.04.2021 SB2021042205
SB2021060101
SB2021063033
and 3 more
#VU52494 - Cross-Site Request Forgery (CSRF)
CVE-2021-21644
CWE-352 Low
No
No
3.11.462-1.git.c33a657.el7, 4.5.0-202106011407.p0.git.75cc301.el8 22.04.2021 SB2021042205
SB2021060101
SB2021063033
and 3 more
#VU52493 - Permissions, Privileges, and Access Controls
CVE-2021-21643
CWE-264 Low
No
No
3.11.462-1.git.c33a657.el7, 4.5.0-202106011407.p0.git.75cc301.el8 22.04.2021 SB2021042205
SB2021060101
SB2021063033
and 3 more
#VU52492 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2021-21642
CWE-611 Medium
No
No
3.11.462-1.git.c33a657.el7, 4.5.0-202106011407.p0.git.75cc301.el8 22.04.2021 SB2021042205
SB2021060101
SB2021063033
and 3 more
#VU52385 - Improper input validation
CVE-2020-27223
CWE-20 Medium
Available
No
3.11.462-1.git.c33a657.el7, 4.5.0-202106011407.p0.git.75cc301.el8, 4.6.0-202106181055.p0.git.7feb5bd.el8 21.04.2021 SB2021042107
SB2021063002
SB2021063034
and 19 more
#VU51604 - Improper Validation of Certificate with Host Mismatch
CVE-2021-28363
CWE-297 Medium
No
No
3.11.420-1.git.1500.afe0076.el7 22.03.2021 SB2021032215
SB2021052523
SB2021071501
and 9 more
#VU49522 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21603
CWE-79 Low
No
No
4.6.0-202102031810.p0.git.2225.a3ab872.el8 13.01.2021 SB2021011418
SB2021011445
SB2021012106
and 2 more
#VU49526 - XML Injection
CVE-2021-21604
CWE-91 Medium
No
No
4.6.0-202102031810.p0.git.2225.a3ab872.el8 13.01.2021 SB2021011418
SB2021011446
SB2021012106
and 2 more
#VU49527 - Exposure of sensitive information to an unauthorized actor
CVE-2021-21602
CWE-200 Medium
No
No
4.6.0-202102031810.p0.git.2225.a3ab872.el8 13.01.2021 SB2021011418
SB2021011444
SB2021012106
and 2 more
#VU49528 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-21605
CWE-22 Medium
No
No
4.6.0-202102031810.p0.git.2225.a3ab872.el8 13.01.2021 SB2021011418
SB2021011447
SB2021012106
and 2 more
#VU48977 - Information Exposure Through Log Files
CVE-2020-8564
CWE-532 Low
No
No
3.11.501-1.git.c33a657.el7, 4.6.0-202101151835.p0.git.2220.40847e5.el8 07.12.2020 SB2020121507
SB2020121509
SB2020121808
and 6 more
#VU48942 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2020-27216
CWE-362 Low
No
No
3.11.462-1.git.c33a657.el7, 4.5.0-202106011407.p0.git.75cc301.el8, 4.6.0-202106181055.p0.git.7feb5bd.el8 23.10.2020 SB2020121307
SB2020121308
SB2021012011
and 27 more
#VU27924 - Incorrect Default Permissions
CVE-2020-1945
CWE-276 Low
No
No
4.6.0-202102031810.p0.git.2225.a3ab872.el8 15.05.2020 SB2020051501
SB2020052114
SB2020060205
and 49 more
#VU47428 - Permissions, Privileges, and Access Controls
CVE-2020-11979
CWE-264 Low
No
No
4.6.0-202102031810.p0.git.2225.a3ab872.el8 14.05.2020 SB2020100804
SB2020100815
SB2020111614
and 51 more


Showing elements 161 - 180 out of 198