Known vulnerabilities in Red Hat OpenShift Dev Spaces - page 25

Vendor: Red Hat Inc.
Software: Red Hat OpenShift Dev Spaces
Software CPE: cpe:2.3:a:red_hat:red_hat_openshift_dev_spaces:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 725
Public exploits: 26
Known exploited (KEV): 7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat OpenShift Dev Spaces Red Hat OpenShift Dev Spaces is affected by 725 known vulnerabilities: 3 critical, 51 high, 136 medium, 535 low Critical High Medium Low

Vulnerabilities (725)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU97217 - Resource exhaustion
CVE-2024-34158		 CWE-400 Medium
No
No
 3.17.0 12.09.2024 SB2024091261
SB2024091264
SB2024091265
and 76 more
#VU97215 - Resource exhaustion
CVE-2024-34155		 CWE-400 Medium
No
No
 3.17.0 12.09.2024 SB2024091261
SB2024091264
SB2024091265
and 81 more
#VU93615 - Incorrect Calculation
CVE-2024-27017		 CWE-682 Low
No
No
 3.17.0 02.07.2024 SB2024070213
SB2024070475
SB20240711232
and 33 more
#VU93386 - Improper Locking
CVE-2024-35839		 CWE-667 Low
No
No
 3.17.0 26.06.2024 SB2024062677
SB2024070474
SB2024070842
and 29 more
#VU92719 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-24857		 CWE-362 Low
No
No
 3.17.0 20.06.2024 SB20240620138
SB20240711193
SB20240711205
and 40 more
#VU91471 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-27062		 CWE-362 Low
No
No
 3.17.0 08.06.2024 SB20240608183
SB2024070828
SB2024070838
and 23 more
#VU91427 - Race Condition within a Thread
CVE-2024-35898		 CWE-366 Low
No
No
 3.17.0 08.06.2024 SB20240608139
SB2024070838
SB2024070839
and 45 more
#VU91288 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-32465		 CWE-94 High
No
No
 3.15.0, 3.16.0, 3.17.0 07.06.2024 SB2024060720
SB2024060721
SB2024060723
and 44 more
#VU91287 - UNIX Symbolic Link (Symlink) Following
CVE-2024-32021		 CWE-61 Medium
No
No
 3.15.0, 3.16.0, 3.17.0 07.06.2024 SB2024060720
SB2024060721
SB2024060723
and 44 more
#VU91286 - UNIX Hard Link
CVE-2024-32020		 CWE-62 Medium
No
No
 3.15.0, 3.16.0, 3.17.0 07.06.2024 SB2024060720
SB2024060721
SB2024060723
and 43 more
#VU91096 - Out-of-bounds read
CVE-2024-26851		 CWE-125 Low
No
No
 3.17.0 04.06.2024 SB20240604100
SB2024070835
SB2024070836
and 45 more
#VU90774 - Improper Locking
CVE-2024-26976		 CWE-667 Low
No
No
 3.17.0 03.06.2024 SB2024060374
SB2024061046
SB2024070838
and 47 more
#VU89491 - Unrestricted Upload of File with Dangerous Type
CVE-2024-32002		 CWE-434 High
Available
No
 3.15.0, 3.16.0, 3.17.0 15.05.2024 SB2024051504
SB2024060720
SB2024060721
and 52 more
#VU89490 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-32004		 CWE-94 High
No
No
 3.15.0, 3.16.0, 3.17.0 15.05.2024 SB2024051503
SB2024060720
SB2024060721
and 51 more
#VU89351 - Insufficient Verification of Data Authenticity
CVE-2024-34397		 CWE-345 Low
No
No
 3.16.0, 3.17.0 10.05.2024 SB2024051042
SB2024051043
SB2024051044
and 88 more
#VU89055 - Resource Management Errors
CVE-2024-26924		 CWE-399 Low
No
No
 3.17.0 29.04.2024 SB2024042980
SB2024042991
SB2024042992
and 58 more
#VU88152 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2024-24795		 CWE-113 Medium
No
No
 3.17.0 04.04.2024 SB2024040458
SB2024040502
SB2024040903
and 39 more
#VU87672 - Improper input validation
CVE-2024-28835		 CWE-20 Medium
No
No
 3.15.0, 3.16.0, 3.17.0 20.03.2024 SB2024032057
SB2024032058
SB2024032059
and 71 more
#VU87671 - Cryptographic Issues
CVE-2024-28834		 CWE-310 Medium
No
No
 3.15.0, 3.16.0, 3.17.0 20.03.2024 SB2024032057
SB2024032058
SB2024032059
and 111 more
#VU86052 - Use After Free
CVE-2024-25062		 CWE-416 High
No
No
 3.15.0, 3.16.0, 3.17.0 05.02.2024 SB2024020507
SB2024020508
SB2024020742
and 115 more


Showing elements 481 - 500 out of 725