Known vulnerabilities in Red Hat OpenShift Dev Spaces - page 28

Vendor: Red Hat Inc.
Software: Red Hat OpenShift Dev Spaces
Software CPE: cpe:2.3:a:red_hat:red_hat_openshift_dev_spaces:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 725
Public exploits: 26
Known exploited (KEV): 7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat OpenShift Dev Spaces Red Hat OpenShift Dev Spaces is affected by 725 known vulnerabilities: 3 critical, 51 high, 136 medium, 535 low Critical High Medium Low

Vulnerabilities (725)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU100446 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2024-52532		 CWE-835 Low
No
No
 3.17.0 13.11.2024 SB2024111329
SB2024111341
SB2024111357
and 25 more
#VU100445 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2024-52530		 CWE-444 Medium
No
No
 3.17.0 13.11.2024 SB2024111328
SB2024111330
SB2024111331
and 36 more
#VU96050 - Server-Side Request Forgery (SSRF)
CVE-2024-39338		 CWE-918 Medium
No
No
 3.16.0 15.08.2024 SB2024081543
SB2024090326
SB2024090446
and 63 more
#VU95571 - Command injection
CVE-2024-6923		 CWE-77 Medium
No
No
 3.16.0 08.08.2024 SB2024080861
SB2024080862
SB2024080863
and 144 more
#VU95339 - Improper Control of Generation of Code ('Code Injection')
CVE-2024-6345		 CWE-94 High
No
No
 3.16.0 05.08.2024 SB2024080590
SB2024080593
SB2024080594
and 160 more
#VU94555 - Improper input validation
CVE-2024-21147		 CWE-20 Medium
No
No
 3.16.0 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 123 more
#VU94556 - Improper input validation
CVE-2024-21145		 CWE-20 Medium
No
No
 3.16.0 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 130 more
#VU94557 - Improper input validation
CVE-2024-21140		 CWE-20 Medium
No
No
 3.16.0 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 119 more
#VU94559 - Improper input validation
CVE-2024-21131		 CWE-20 Low
No
No
 3.16.0 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 135 more
#VU94560 - Improper input validation
CVE-2024-21138		 CWE-20 Low
No
No
 3.16.0 18.07.2024 SB20240718154
SB20240718155
SB20240718156
and 117 more
#VU94522 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-6409		 CWE-362 High
No
No
 3.16.0 18.07.2024 SB2024070144
SB2024071838
SB20240718188
and 17 more
#VU92075 - UNIX Symbolic Link (Symlink) Following
CVE-2024-35235		 CWE-61 Low
Available
No
 3.15.0, 3.16.0 13.06.2024 SB2024061389
SB2024061398
SB2024061399
and 29 more
#VU88153 - Resource exhaustion
CVE-2024-27316		 CWE-400 Medium
Available
No
 3.16.0 04.04.2024 SB2024040458
SB2024040502
SB2024040545
and 51 more
#VU88144 - Improper input validation
CVE-2024-28182		 CWE-20 Medium
No
No
 3.15.0, 3.16.0 04.04.2024 SB2024040442
SB2024040443
SB2024040444
and 124 more
#VU87196 - Error Handling
CVE-2024-24783		 CWE-388 Medium
No
No
 3.16.0 07.03.2024 SB2024030734
SB2024030750
SB2024030752
and 81 more
#VU86694 - Improper Access Control
CVE-2024-22234		 CWE-284 Medium
No
No
 3.16.0 21.02.2024 SB2024022139
SB2024041137
SB2024061708
and 3 more
#VU85808 - NULL Pointer Dereference
CVE-2024-0727		 CWE-476 Medium
No
No
 3.16.0 25.01.2024 SB2024012552
SB2024020525
SB2024021323
and 100 more
#VU85552 - Resource exhaustion
CVE-2024-22365		 CWE-400 Low
No
No
 3.16.0 17.01.2024 SB2024011799
SB20240117126
SB2024011839
and 44 more
#VU81434 - Integer overflow
CVE-2023-43787		 CWE-190 Low
No
No
 3.16.0 03.10.2023 SB2023100341
SB2023100346
SB2023100347
and 42 more
#VU81432 - Out-of-bounds read
CVE-2023-43785		 CWE-125 Low
No
No
 3.16.0 03.10.2023 SB2023100341
SB2023100347
SB2023100423
and 37 more


Showing elements 541 - 560 out of 725