Known vulnerabilities in openstack-ironic-python-agent (Red Hat package) - page 2
Vendor:
Red Hat Inc.
Software CPE:
cpe:2.3:o:red_hat:openstack-ironic-python-agent_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
55
Public exploits:
3
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
9.0.1-0.20240913135525.2b2dd8f.el9
9.3.1-0.20240911165036.dfceb59.el9
9.6.1-0.20240103100525.3197b9d.el9
9.2.0-0.20221128164006.a167075.el9
6.4.4-0.20210811101217.48ffbaa.el8
6.4.3-0.20201217171210.bd45db1.el8
5.0.1-0.20191125202513.9681fd7.el8ost
6.3.1-0.20200918042952.9dd968f.el8ost
9.0.1-0.20220818145522.ad1eb41.el9
8.6.1-0.20220623075054.1d50c23.el8
8.1.1-0.20220623092113.0849a1b.el8
8.3.1-0.20220606104811.3c9b113.el8
8.3.1-0.20220105174059.d2d3cd6.el8
8.1.1-0.20210722155129.7f3de67.el8
7.0.2-0.20210611153100.bfa97cb.el8
6.4.4-0.20210310142329.99b9953.el8
5.0.1-0.20200123140814.025b790.el8ost
3.2.4-1.el7
3.2.3-1.el7
3.2.2-4.el7
3.2.2-3.el7
3.2.2-2.el7
3.2.2-1.el7
3.2.1-4.el7
3.2.1-3.el7
3.2.1-2.el7
2.2.3-1.el7
2.2.2-3.el7
2.0.1-3.el7
2.0.1-2.el7
2.0.0-2.el7
2.0.0-1.el7
1.5.2-6.el7
1.5.2-3.el7
1.5.2-2.el7
1.5.1-3.el7
1.5.1-1.el7
1.5.0-4.el7
1.2.2-3.el7
1.1.0-10.el7
1.1.0-8.el7
Vulnerabilities (55)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU77628 - Improper input validation CVE-2012-6153 |
CWE-20 | Medium | 8.3.1-0.20220105174059.d2d3cd6.el8 | 22.06.2023 |
SB2023062250 SB2023092013 SB2023092037 and 15 more |
||
| #VU68299 - Incorrect Permission Assignment for Critical Resource CVE-2022-0532 |
CWE-732 | Medium | 8.3.1-0.20220105174059.d2d3cd6.el8 | 13.10.2022 |
SB2022101333 SB2022101334 SB2022101335 and 4 more |
||
| #VU64269 - Integer overflow CVE-2022-28327 |
CWE-190 | Low | 8.6.1-0.20220623075054.1d50c23.el8 | 14.06.2022 |
SB2022041004 SB2022061422 SB2022061506 and 90 more |
||
| #VU64266 - Buffer overflow CVE-2022-24675 |
CWE-120 | Low | 8.6.1-0.20220623075054.1d50c23.el8 | 14.06.2022 |
SB2022041004 SB2022061422 SB2022061511 and 88 more |
||
| #VU64008 - Resource exhaustion CVE-2022-1708 |
CWE-400 | Medium | 8.3.1-0.20220606104811.3c9b113.el8 | 07.06.2022 |
SB2022060707 SB2022061334 SB2022061627 and 15 more |
||
| #VU63493 - Improper Access Control CVE-2022-1706 |
CWE-284 | Low | 8.6.1-0.20220623075054.1d50c23.el8 | 20.05.2022 |
SB2022052015 SB2022071162 SB2022071163 and 9 more |
||
| #VU63090 - Permissions, Privileges, and Access Controls CVE-2022-29162 |
CWE-264 | Medium | 8.6.1-0.20220623075054.1d50c23.el8 | 12.05.2022 |
SB2022051205 SB2022062435 SB2022071158 and 32 more |
||
| #VU62796 - Incorrect Default Permissions CVE-2022-27652 |
CWE-276 | Low | 8.1.1-0.20220623092113.0849a1b.el8 | 04.05.2022 |
SB2022050416 SB2022050422 SB2022080148 and 1 more |
||
| #VU62039 - Use of a Broken or Risky Cryptographic Algorithm CVE-2022-27191 |
CWE-327 | Medium | 8.6.1-0.20220623075054.1d50c23.el8 | 10.04.2022 |
SB2022041004 SB2022041406 SB2022081226 and 91 more |
||
| #VU62038 - Resource exhaustion CVE-2022-23772 |
CWE-400 | Medium | 8.6.1-0.20220623075054.1d50c23.el8 | 10.04.2022 |
SB2022041002 SB2022060126 SB2022060127 and 40 more |
||
| #VU62037 - Incorrect Authorization CVE-2022-23773 |
CWE-863 | Low | 8.6.1-0.20220623075054.1d50c23.el8 | 10.04.2022 |
SB2022041002 SB2022060126 SB2022060127 and 39 more |
||
| #VU62036 - Unchecked Return Value CVE-2022-23806 |
CWE-252 | Medium | 8.6.1-0.20220623075054.1d50c23.el8 | 10.04.2022 |
SB2022041002 SB2022041003 SB2022060126 and 46 more |
||
| #VU61599 - Improper input validation CVE-2022-21698 |
CWE-20 | Medium | 8.6.1-0.20220623075054.1d50c23.el8 | 24.03.2022 |
SB2022021530 SB2022032413 SB2022040807 and 110 more |
||
| #VU61227 - Incorrect Regular Expression CVE-2022-24921 |
CWE-185 | Medium | 8.6.1-0.20220623075054.1d50c23.el8 | 10.03.2022 |
SB2022031004 SB2022031005 SB2022041208 and 41 more |
||
| #VU59042 - Resource exhaustion CVE-2021-44717 |
CWE-400 | Medium | 8.3.1-0.20220105174059.d2d3cd6.el8 | 16.12.2021 |
SB2021121610 SB2021121646 SB2022031628 and 32 more |
||
| #VU58824 - Improper input validation CVE-2021-44716 |
CWE-20 | Medium | 8.3.1-0.20220105174059.d2d3cd6.el8 | 10.12.2021 |
SB2021121010 SB2021121011 SB2021121605 and 67 more |
||
| #VU58229 - Type confusion CVE-2021-41190 |
CWE-843 | Low | 8.3.1-0.20220105174059.d2d3cd6.el8 | 18.11.2021 |
SB2021111806 SB2021111807 SB2021111809 and 39 more |
||
| #VU57150 - Improper Certificate Validation CVE-2014-3577 |
CWE-295 | Low | 8.3.1-0.20220105174059.d2d3cd6.el8 | 08.10.2021 |
SB2014082106 SB2021100807 SB2023020872 and 24 more |
||
| #VU57149 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-21684 |
CWE-79 | Low | 8.3.1-0.20220105174059.d2d3cd6.el8 | 08.10.2021 |
SB2021100806 SB2023022165 SB2022031044 and 1 more |
||
| #VU55642 - Insufficient Session Expiration CVE-2021-34428 |
CWE-613 | Low | 8.1.1-0.20210722155129.7f3de67.el8 | 08.08.2021 |
SB2021080801 SB2021080803 SB2021081922 and 25 more |
Showing elements 21 - 40 out of 55