Known vulnerabilities in Red Hat Migration Toolkit for Applications - page 10

Vendor: Red Hat Inc.
Software: Red Hat Migration Toolkit for Applications
Software CPE: cpe:2.3:a:red_hat:red_hat_migration_toolkit_for_applications:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 288
Public exploits: 17
Known exploited (KEV): 5
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat Migration Toolkit for Applications Red Hat Migration Toolkit for Applications is affected by 288 known vulnerabilities: 2 critical, 57 high, 157 medium, 72 low Critical High Medium Low

Vulnerabilities (288)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU80637 - Heap-based Buffer Overflow
CVE-2023-4863		 CWE-122 Critical
Available
Exploited
 6.2.1 11.09.2023 SB2023091178
SB2023091245
SB2023091265
and 137 more
#VU80634 - Memory corruption
CVE-2020-22219		 CWE-119 High
No
No
 6.2.1 11.09.2023 SB2023091172
SB2023091173
SB2023091174
and 17 more
#VU80059 - Stack-based buffer overflow
CVE-2023-30079		 CWE-121 High
No
No
 6.2.1 29.08.2023 SB2023032714
SB2023082912
SB2023082913
and 11 more
#VU78981 - Inefficient Regular Expression Complexity
CVE-2023-34104		 CWE-1333 Medium
No
No
 6.2.0 07.08.2023 SB2023080707
SB2023081408
SB2023091122
and 6 more
#VU78490 - Permissions, Privileges, and Access Controls
CVE-2023-34969		 CWE-264 Low
No
No
 6.2.1 21.07.2023 SB2023072119
SB2023072121
SB2023072122
and 61 more
#VU76757 - Missing release of memory after effective lifetime
CVE-2023-2602		 CWE-401 Medium
No
No
 6.2.1 01.06.2023 SB2023060126
SB2023061452
SB2023070343
and 74 more
#VU76308 - Improper Authentication
CVE-2023-32360		 CWE-287 Medium
No
No
 6.2.1 18.05.2023 SB2023051860
SB2023051901
SB2023051902
and 36 more
#VU75792 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-29400		 CWE-79 Medium
No
No
 6.2.0 08.05.2023 SB2023050814
SB2023050817
SB2023050825
and 74 more
#VU75791 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-24540		 CWE-94 Medium
No
No
 6.2.0 08.05.2023 SB2023050814
SB2023050817
SB2023050825
and 81 more
#VU75790 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-24539		 CWE-79 Medium
No
No
 6.2.0 08.05.2023 SB2023050814
SB2023050817
SB2023050825
and 75 more
#VU74863 - NULL Pointer Dereference
CVE-2023-28484		 CWE-476 Medium
No
No
 6.2.1 11.04.2023 SB2023041144
SB2023041145
SB2023041939
and 87 more
#VU74862 - Resource Management Errors
CVE-2023-29469		 CWE-399 Medium
No
No
 6.2.1 11.04.2023 SB2023041144
SB2023041145
SB2023041939
and 84 more
#VU74574 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-24538		 CWE-94 High
No
No
 6.2.0 06.04.2023 SB2023040668
SB2023040678
SB2023040679
and 85 more
#VU74573 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2023-24537		 CWE-835 Medium
No
No
 6.2.0 06.04.2023 SB2023040668
SB2023040678
SB2023040679
and 87 more
#VU74572 - Resource Management Errors
CVE-2023-24536		 CWE-399 Medium
No
No
 6.2.0 06.04.2023 SB2023040668
SB2023040678
SB2023040679
and 80 more
#VU74571 - Resource exhaustion
CVE-2023-24534		 CWE-400 Medium
No
No
 6.2.0 06.04.2023 SB2023040668
SB2023040678
SB2023040679
and 85 more
#VU74270 - Improper Verification of Cryptographic Signature
CVE-2023-22899		 CWE-347 Medium
No
No
 6.2.0 31.03.2023 SB2023033140
SB2023040471
SB2023041871
and 6 more
#VU73264 - Incorrect Calculation
CVE-2023-24532		 CWE-682 High
No
No
 6.2.0 13.03.2023 SB2023031318
SB2023031319
SB2023031537
and 43 more
#VU72703 - Improper Control of Filename for Include/Require Statement in PHP Program
CVE-2023-2603		 CWE-98 High
No
No
 6.2.1 01.03.2023 SB2023030118
SB2023060126
SB2023061452
and 87 more
#VU59148 - Deserialization of Untrusted Data
CVE-2021-46877		 CWE-502 Medium
No
No
 6.2.0 03.01.2022 SB2022010326
SB2022010327
SB2022062734
and 37 more


Showing elements 181 - 200 out of 288