Known vulnerabilities in python-sushy (Red Hat package) - page 3
Vendor:
Red Hat Inc.
Software:
python-sushy (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:python-sushy_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
68
Public exploits:
5
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
4.7.1-0.20240405121030.123a5a5.el9
4.1.6-0.20230517173625.5490eb6.el8
4.4.3-0.20230425095526.9f708cf.el9
4.1.5-0.20221125154417.ff95176.el8
4.1.1-0.20220302175405.c769149.el8
3.6.1-0.20210122201213.7ec0422.el8
2.0.0-0.20190923170230.eaa2cd7.el8ost
3.3.0-0.20200804091926.0dfe74a.el8ost
4.3.4-0.20221213135957.69b014c.el9
4.1.3-0.20221107175431.1da4385.el8
4.1.2-0.20220913104404.1ae8e49.el8
4.1.2-0.20220908165021.1ae8e49.el8
4.0.0-0.20211209155954.45d24d4.el8
3.7.4-0.20211119091058.2cc60dc.el8
3.12.1-0.20211122142104.806622c.el8
3.11.0-0.20210802160404.b93dcba.el8
3.7.3-0.20210804111215.b76050c.el8
3.7.1-0.20210428165244.bc49878.el8
3.5.0-2.20201005161238.74b8111.el8
1.3.3-2.el7
1.3.3-1.el7
1.3.2-1.el7
1.1.0-1.el7
Vulnerabilities (68)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU58460 - Incorrect Default Permissions CVE-2021-3917 |
CWE-276 | Low | 3.7.4-0.20211119091058.2cc60dc.el8 | 30.11.2021 |
SB2021113016 SB2021113017 |
||
| #VU57990 - Missing Authorization CVE-2021-21697 |
CWE-862 | High | 3.7.4-0.20211119091058.2cc60dc.el8, 3.12.1-0.20211122142104.806622c.el8 | 08.11.2021 |
SB2021110805 SB2021110806 SB2021112915 and 4 more |
||
| #VU57988 - Missing Authorization CVE-2021-21695 |
CWE-862 | High | 3.7.4-0.20211119091058.2cc60dc.el8, 3.12.1-0.20211122142104.806622c.el8 | 08.11.2021 |
SB2021110805 SB2021110806 SB2021112915 and 4 more |
||
| #VU57987 - Permissions, Privileges, and Access Controls CVE-2021-21694 |
CWE-264 | High | 3.7.4-0.20211119091058.2cc60dc.el8, 3.12.1-0.20211122142104.806622c.el8 | 08.11.2021 |
SB2021110805 SB2021110806 SB2021112915 and 4 more |
||
| #VU57986 - Improper Authorization CVE-2021-21693 |
CWE-285 | High | 3.7.4-0.20211119091058.2cc60dc.el8, 3.12.1-0.20211122142104.806622c.el8 | 08.11.2021 |
SB2021110805 SB2021110806 SB2021112915 and 4 more |
||
| #VU57984 - Missing Authorization CVE-2021-21691 |
CWE-862 | High | 3.7.4-0.20211119091058.2cc60dc.el8, 3.12.1-0.20211122142104.806622c.el8 | 08.11.2021 |
SB2021110805 SB2021110806 SB2021112915 and 4 more |
||
| #VU57983 - Protection Mechanism Failure CVE-2021-21690 |
CWE-693 | High | 3.7.4-0.20211119091058.2cc60dc.el8, 3.12.1-0.20211122142104.806622c.el8 | 08.11.2021 |
SB2021110805 SB2021110806 SB2021112915 and 4 more |
||
| #VU57982 - Missing Authorization CVE-2021-21689 |
CWE-862 | High | 3.7.4-0.20211119091058.2cc60dc.el8, 3.12.1-0.20211122142104.806622c.el8 | 08.11.2021 |
SB2021110805 SB2021110806 SB2021112915 and 4 more |
||
| #VU57981 - Missing Authorization CVE-2021-21688 |
CWE-862 | Medium | 3.7.4-0.20211119091058.2cc60dc.el8, 3.12.1-0.20211122142104.806622c.el8 | 08.11.2021 |
SB2021110805 SB2021110806 SB2021112915 and 4 more |
||
| #VU57980 - Missing Authorization CVE-2021-21687 |
CWE-862 | Medium | 3.7.4-0.20211119091058.2cc60dc.el8, 3.12.1-0.20211122142104.806622c.el8 | 08.11.2021 |
SB2021110805 SB2021110806 SB2021112915 and 4 more |
||
| #VU57979 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2021-21686 |
CWE-22 | Medium | 3.7.4-0.20211119091058.2cc60dc.el8, 3.12.1-0.20211122142104.806622c.el8 | 08.11.2021 |
SB2021110805 SB2021110806 SB2021112915 and 4 more |
||
| #VU57978 - Missing Authorization CVE-2021-21685 |
CWE-862 | High | 3.7.4-0.20211119091058.2cc60dc.el8, 3.12.1-0.20211122142104.806622c.el8 | 08.11.2021 |
SB2021110805 SB2021110806 SB2021112915 and 4 more |
||
| #VU56902 - Permissions, Privileges, and Access Controls CVE-2021-25741 |
CWE-264 | Medium | 3.7.3-0.20210804111215.b76050c.el8 | 28.09.2021 |
SB2021092804 SB2021092805 SB2021092913 and 8 more |
||
| #VU56245 - Improper input validation CVE-2021-25735 |
CWE-20 | Medium | 3.7.1-0.20210428165244.bc49878.el8 | 01.09.2021 |
SB2021090125 SB2021090126 SB2022083132 and 4 more |
||
| #VU55642 - Insufficient Session Expiration CVE-2021-34428 |
CWE-613 | Low | 3.11.0-0.20210802160404.b93dcba.el8 | 08.08.2021 |
SB2021080801 SB2021080803 SB2021081922 and 25 more |
||
| #VU55006 - Use After Free CVE-2021-36980 |
CWE-416 | High | 3.11.0-0.20210802160404.b93dcba.el8 | 20.07.2021 |
SB2021072016 SB2021072017 SB2021102110 and 15 more |
||
| #VU54521 - Resource exhaustion CVE-2021-33196 |
CWE-400 | Medium | 3.11.0-0.20210802160404.b93dcba.el8 | 04.07.2021 |
SB2021070405 SB2021070406 SB2021071515 and 37 more |
||
| #VU53973 - Improper input validation CVE-2021-28169 |
CWE-20 | Medium | 3.11.0-0.20210802160404.b93dcba.el8 | 09.06.2021 |
SB2021060910 SB2021061815 SB2021081922 and 36 more |
||
| #VU53436 - Exposure of sensitive information to an unauthorized actor CVE-2021-25737 |
CWE-200 | Low | 3.7.1-0.20210428165244.bc49878.el8 | 24.05.2021 |
SB2021052409 SB2021060911 SB2021090126 and 4 more |
||
| #VU53152 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2021-21648 |
CWE-79 | Low | 3.7.1-0.20210428165244.bc49878.el8 | 12.05.2021 |
SB2021051209 SB2021090126 SB2022083132 and 1 more |
Showing elements 41 - 60 out of 68