Known vulnerabilities in python-pulpcore (Red Hat package) - page 2
Vendor:
Red Hat Inc.
Software:
python-pulpcore (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:python-pulpcore_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
95
Public exploits:
7
Known exploited (KEV):
3
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
3.63.21-2.el9pc
3.49.39-2.el8pc
3.49.39-2.el9pc
3.63.21-1.el9pc
3.49.39-1.el8pc
3.49.39-1.el9pc
3.63.11-1.el9pc
3.39.25-1.el8pc
3.28.37-1.el9ap
3.49.33-1.el8pc
3.49.33-1.el9pc
3.49.22-1.el8ui
3.28.36-1.el9ap
3.49.28-1.el8pc
3.49.28-1.el9pc
3.49.19-1.el8pc
3.49.19-1.el9pc
3.39.21-1.el8pc
3.28.32-1.el9ap
3.28.31-1.el9ap
3.28.27-1.el9ap
3.39.8-2.el8pc
3.39.11-1.el8ui
3.28.24-1.el9ap
3.22.22-2.el8pc
3.28.23-1.el9ap
3.22.19-1.el8pc
3.22.15-2.el8pc
3.21.18-1.el8pc
3.21.9-1.el8pc
3.11.2-2.el8pc
3.18.16-1.el8pc
3.16.15-1.el8pc
3.21.0-1.0.1.el8ui
3.16.9-1.el8pc
3.14.8-2.el7pc
3.18.11-1.el8pc
3.15.9-2.el8pc
3.17.6-3.el8ui
3.14.12-1.el7pc
3.7.6-1.el7pc
3.7.3-2.el7pc
Vulnerabilities (95)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU96644 - Improper input validation CVE-2024-7246 |
CWE-20 | Medium | 3.28.31-1.el9ap, 3.49.19-1.el8pc, 3.49.19-1.el9pc, 3.49.22-1.el8ui | 30.08.2024 |
SB2024083031 SB2024083036 SB2024090612 and 11 more |
||
| #VU95442 - Resource exhaustion CVE-2024-41989 |
CWE-400 | High | 3.28.31-1.el9ap, 3.49.22-1.el8ui | 07.08.2024 |
SB2024080722 SB2024080728 SB2024080771 and 14 more |
||
| #VU94792 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2024-5569 |
CWE-835 | Medium | 3.28.31-1.el9ap, 3.49.19-1.el8pc, 3.49.19-1.el9pc | 26.07.2024 |
SB2024072688 SB2024072690 SB2024072692 and 59 more |
||
| #VU94188 - Improper input validation CVE-2024-39614 |
CWE-20 | Medium | 3.28.31-1.el9ap, 3.49.19-1.el8pc, 3.49.19-1.el9pc, 3.49.22-1.el8ui | 12.07.2024 |
SB2024071225 SB2024071228 SB2024071229 and 15 more |
||
| #VU94184 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2024-39330 |
CWE-22 | Medium | 3.28.31-1.el9ap, 3.49.19-1.el8pc, 3.49.19-1.el9pc | 12.07.2024 |
SB2024071225 SB2024071228 SB2024071229 and 13 more |
||
| #VU94183 - Exposure of sensitive information to an unauthorized actor CVE-2024-39329 |
CWE-200 | Medium | 3.28.31-1.el9ap, 3.49.19-1.el8pc, 3.49.19-1.el9pc | 12.07.2024 |
SB2024071225 SB2024071228 SB2024071229 and 14 more |
||
| #VU94182 - Improper input validation CVE-2024-38875 |
CWE-20 | Medium | 3.28.31-1.el9ap, 3.49.19-1.el8pc, 3.49.19-1.el9pc | 12.07.2024 |
SB2024071225 SB2024071228 SB2024071229 and 13 more |
||
| #VU91833 - Cryptographic Issues CVE-2024-33663 |
CWE-310 | Medium | 3.28.31-1.el9ap | 12.06.2024 |
SB2024061202 SB2024090612 SB2024110708 and 2 more |
||
| #VU89677 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-34064 |
CWE-79 | Medium | 3.28.27-1.el9ap, 3.49.22-1.el8ui | 20.05.2024 |
SB2024052067 SB2024052081 SB2024052082 and 83 more |
||
| #VU89167 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2024-1135 |
CWE-444 | Medium | 3.28.27-1.el9ap, 3.39.21-1.el8pc, 3.49.22-1.el8ui | 06.05.2024 |
SB2024050631 SB2024050632 SB2024050633 and 40 more |
||
| #VU89159 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2024-30251 |
CWE-835 | Medium | 3.28.27-1.el9ap, 3.49.22-1.el8ui | 06.05.2024 |
SB2024050618 SB2024061929 SB2024072506 and 12 more |
||
| #VU88853 - Incorrect Regular Expression CVE-2024-3772 |
CWE-185 | Medium | 3.28.27-1.el9ap | 19.04.2024 |
SB2024041926 SB2024041929 SB2024041930 and 8 more |
||
| #VU88804 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-27306 |
CWE-79 | Medium | 3.28.27-1.el9ap, 3.49.22-1.el8ui | 18.04.2024 |
SB2024041813 SB2024042444 SB2024042445 and 12 more |
||
| #VU88184 - Resource exhaustion CVE-2023-45288 |
CWE-400 | Medium | 3.28.27-1.el9ap | 05.04.2024 |
SB2024040533 SB2024040549 SB2024040551 and 189 more |
||
| #VU87583 - Improper input validation CVE-2024-21503 |
CWE-20 | Medium | 3.28.27-1.el9ap | 18.03.2024 |
SB2024031822 SB2024050632 SB2024061929 and 7 more |
||
| #VU87551 - Exposure of sensitive information to an unauthorized actor CVE-2024-28849 |
CWE-200 | Low | 3.28.27-1.el9ap | 15.03.2024 |
SB2024031508 SB2024031517 SB2024040365 and 59 more |
||
| #VU87129 - NULL Pointer Dereference CVE-2024-26130 |
CWE-476 | Medium | 3.28.27-1.el9ap, 3.39.21-1.el8pc, 3.49.22-1.el8ui | 05.03.2024 |
SB2024030534 SB2024030535 SB2024030546 and 41 more |
||
| #VU87033 - Inefficient Regular Expression Complexity CVE-2024-27351 |
CWE-1333 | Medium | 3.28.24-1.el9ap, 3.28.27-1.el9ap, 3.39.11-1.el8ui | 04.03.2024 |
SB2024030431 SB2024030441 SB2024030442 and 21 more |
||
| #VU84849 - Command injection CVE-2023-5752 |
CWE-77 | Medium | 3.28.27-1.el9ap | 28.12.2023 |
SB2023122824 SB2023122825 SB2023122826 and 32 more |
||
| #VU83930 - NULL Pointer Dereference CVE-2023-49083 |
CWE-476 | Medium | 3.28.24-1.el9ap, 3.28.27-1.el9ap, 3.39.11-1.el8ui | 06.12.2023 |
SB2023120655 SB2023120656 SB2023121440 and 63 more |
Showing elements 21 - 40 out of 95