Known vulnerabilities in Quay - page 5

Software: Quay
Software CPE: cpe:2.3:a:red_hat:quay:*:*:*:*:*:*:*:*
Total vulnerabilities: 115
Public exploits: 10
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Quay Quay is affected by 115 known vulnerabilities: 40 high, 52 medium, 23 low Critical High Medium Low

Vulnerabilities (115)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU48062 - Memory corruption
CVE-2019-8835
CWE-119 High
No
No
3.3.3 27.10.2020 SB2020020537
SB2020122208
SB2021011210
and 7 more
#VU48600 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2019-20916
CWE-22 Medium
No
No
3.3.3 04.09.2020 SB2020090420
SB2020112328
SB2020122208
and 29 more
#VU32881 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2019-20907
CWE-835 Medium
No
No
3.3.3 29.07.2020 SB2020071324
SB2020080201
SB2020082408
and 53 more
#VU29116 - Out-of-bounds read
CVE-2019-20454
CWE-125 Medium
No
No
3.3.3 17.06.2020 SB2020021421
SB2020061707
SB2020110528
and 14 more
#VU30281 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2019-20807
CWE-78 Low
No
No
3.3.3 28.05.2020 SB2020052815
SB2020061148
SB2020110918
and 9 more
#VU26756 - Resource Management Errors
CVE-2020-1730
CWE-399 Medium
No
No
3.3.3 10.04.2020 SB2020041003
SB2020041004
SB2020041005
and 25 more
#VU24490 - Out-of-bounds read
CVE-2019-20387
CWE-125 Medium
No
No
3.3.3 22.01.2020 SB2020012221
SB2020110530
SB2020112328
and 7 more
#VU24489 - Missing release of memory after effective lifetime
CVE-2019-19956
CWE-401 Medium
No
No
3.3.3 22.01.2020 SB2019122405
SB2020021011
SB2020052301
and 24 more
#VU24487 - Missing release of memory after effective lifetime
CVE-2019-20388
CWE-401 Medium
No
No
3.3.3 22.01.2020 SB2020012220
SB2020052301
SB2020062607
and 28 more
#VU24065 - Missing release of memory after effective lifetime
CVE-2019-20218
CWE-401 Low
No
No
3.3.3 07.01.2020 SB2019122301
SB2020072756
SB2020110913
and 13 more
#VU23796 - Out-of-bounds write
CVE-2019-19906
CWE-787 Medium
No
No
3.3.3 23.12.2019 SB2019122303
SB2019122304
SB2020012820
and 15 more
#VU23508 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2019-14889
CWE-78 Medium
No
No
3.3.3 11.12.2019 SB2019121035
SB2019121107
SB2019121701
and 21 more
#VU23188 - Divide By Zero
CVE-2019-16168
CWE-369 Low
Available
No
3.3.3 02.12.2019 SB2019120212
SB2019100934
SB2019100935
and 25 more
#VU23170 - Memory corruption
CVE-2019-8823
CWE-119 High
No
No
3.3.3 02.12.2019 SB2019110806
SB2019113004
SB2019113005
and 6 more
#VU23166 - Memory corruption
CVE-2019-8819
CWE-119 High
No
No
3.3.3 02.12.2019 SB2019110806
SB2019113004
SB2019113005
and 6 more
#VU22931 - Out-of-bounds read
CVE-2019-19221
CWE-125 Medium
No
No
3.3.3 22.11.2019 SB2019112216
SB2020030312
SB2020061710
and 13 more
#VU21950 - Memory corruption
CVE-2019-15165
CWE-119 Low
No
No
3.3.3 21.10.2019 SB2019102102
SB2019102103
SB2019100318
and 10 more
#VU21440 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-16935
CWE-79 Medium
No
No
3.3.3 30.09.2019 SB2019093008
SB2019111003
SB2019111004
and 24 more
#VU21091 - Out-of-bounds read
CVE-2019-15903
CWE-125 Medium
Available
No
3.3.3 12.09.2019 SB2019091209
SB2019091210
SB2019091701
and 61 more
#VU18923 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2018-20843
CWE-611 Medium
Available
No
3.3.3 27.06.2019 SB2019062808
SB2019070104
SB2019072102
and 30 more


Showing elements 81 - 100 out of 115