Known vulnerabilities in Red Hat OpenShift Dev Spaces - page 27

Vendor: Red Hat Inc.
Software: Red Hat OpenShift Dev Spaces
Software CPE: cpe:2.3:a:red_hat:red_hat_openshift_dev_spaces:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 723
Public exploits: 26
Known exploited (KEV): 6
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat OpenShift Dev Spaces Red Hat OpenShift Dev Spaces is affected by 723 known vulnerabilities: 3 critical, 51 high, 136 medium, 533 low Critical High Medium Low

Vulnerabilities (723)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU96050 - Server-Side Request Forgery (SSRF)
CVE-2024-39338		 CWE-918 Medium
No
No
 3.16.0 15.08.2024 SB2024081543
SB2024090326
SB2024090446
and 63 more
#VU95571 - Command injection
CVE-2024-6923		 CWE-77 Medium
No
No
 3.16.0 08.08.2024 SB2024080861
SB2024080862
SB2024080863
and 143 more
#VU95339 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-6345		 CWE-94 High
No
No
 3.16.0 05.08.2024 SB2024080590
SB2024080593
SB2024080594
and 159 more
#VU94555 - Improper input validation
CVE-2024-21147		 CWE-20 Medium
No
No
 3.16.0 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 123 more
#VU94556 - Improper input validation
CVE-2024-21145		 CWE-20 Medium
No
No
 3.16.0 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 130 more
#VU94557 - Improper input validation
CVE-2024-21140		 CWE-20 Medium
No
No
 3.16.0 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 119 more
#VU94559 - Improper input validation
CVE-2024-21131		 CWE-20 Low
No
No
 3.16.0 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 135 more
#VU94522 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-6409		 CWE-362 High
No
No
 3.16.0 18.07.2024 SB2024070144
SB2024071838
SB20240718188
and 17 more
#VU93543 - Server-Side Request Forgery (SSRF)
CVE-2024-38476		 CWE-918 High
No
No
 3.16.0 01.07.2024 SB2024070155
SB20240702144
SB2024070402
and 61 more
#VU93519 - Out-of-bounds read
CVE-2024-37371		 CWE-125 Medium
No
No
 3.16.0 01.07.2024 SB2024070148
SB2024070491
SB2024070496
and 114 more
#VU93518 - Improper input validation
CVE-2024-37370		 CWE-20 Medium
No
No
 3.16.0 01.07.2024 SB2024070148
SB2024070491
SB2024070496
and 96 more
#VU93118 - Use of Potentially Dangerous Function
CVE-2024-39331		 CWE-676 High
No
No
 3.16.0, 3.17.0 24.06.2024 SB2024062429
SB2024062430
SB2024062431
and 46 more
#VU93077 - Improper input validation
CVE-2024-38428		 CWE-20 Medium
No
No
 3.16.0 22.06.2024 SB2024062208
SB2024062219
SB2024062421
and 45 more
#VU92262 - Exposure of sensitive information to an unauthorized actor
CVE-2024-37891		 CWE-200 Low
No
No
 3.16.0 19.06.2024 SB2024061955
SB20240625146
SB2024062605
and 193 more
#VU88153 - Resource exhaustion
CVE-2024-27316		 CWE-400 Medium
Available
No
 3.16.0 04.04.2024 SB2024040458
SB2024040502
SB2024040545
and 51 more
#VU86694 - Improper Access Control
CVE-2024-22234		 CWE-284 Medium
No
No
 3.16.0 21.02.2024 SB2024022139
SB2024041137
SB2024061708
and 3 more
#VU85808 - NULL Pointer Dereference
CVE-2024-0727		 CWE-476 Medium
No
No
 3.16.0 25.01.2024 SB2024012552
SB2024020525
SB2024021323
and 100 more
#VU83508 - Off-by-one Error
CVE-2023-47038		 CWE-193 High
No
No
 3.16.0, 3.17.0 27.11.2023 SB2023112761
SB2023112763
SB2023112959
and 33 more
#VU81434 - Integer overflow
CVE-2023-43787		 CWE-190 Low
No
No
 3.16.0 03.10.2023 SB2023100341
SB2023100346
SB2023100347
and 42 more
#VU81432 - Out-of-bounds read
CVE-2023-43785		 CWE-125 Low
No
No
 3.16.0 03.10.2023 SB2023100341
SB2023100347
SB2023100423
and 37 more


Showing elements 521 - 540 out of 723