Known vulnerabilities in Red Hat OpenStack for IBM Power - page 5

Vendor: Red Hat Inc.
Software: Red Hat OpenStack for IBM Power
Software CPE: cpe:2.3:a:red_hat:red_hat_openstack_for_ibm_power:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 129
Public exploits: 7
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat OpenStack for IBM Power Red Hat OpenStack for IBM Power is affected by 129 known vulnerabilities: 7 high, 66 medium, 56 low Critical High Medium Low

Vulnerabilities (129)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU21766 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2019-3828		 CWE-22 High
No
No
 - 14.10.2019 SB2019032710
SB2019081432
SB2019062713
and 13 more
#VU21142 - Improper Certificate Validation
CVE-2019-0223		 CWE-295 Low
No
No
 - 17.09.2019 SB2019042311
SB2019091704
SB2019091705
and 8 more
#VU20499 - NULL Pointer Dereference
CVE-2019-12155		 CWE-476 Medium
No
No
 - 02.09.2019 SB2019090204
SB2019090303
SB2019090501
and 11 more
#VU20446 - Heap-based Buffer Overflow
CVE-2019-14378		 CWE-122 Medium
No
No
 - 28.08.2019 SB2019082401
SB2019090204
SB2019090303
and 22 more
#VU20338 - Exposure of sensitive information to an unauthorized actor
CVE-2019-14433		 CWE-200 Low
No
No
 - 20.08.2019 SB2019082002
SB2019082003
SB2019090418
and 2 more
#VU20337 - Resource Management Errors
CVE-2019-9515		 CWE-399 Medium
No
No
 - 20.08.2019 SB2019082005
SB2019082402
SB2019091011
and 39 more
#VU20201 - Resource exhaustion
CVE-2019-9514		 CWE-400 Medium
No
No
 - 13.08.2019 SB2019081326
SB2019082004
SB2019082502
and 79 more
#VU20200 - Resource exhaustion
CVE-2019-9512		 CWE-400 Medium
No
No
 - 13.08.2019 SB2019081326
SB2019082006
SB2019082502
and 72 more
#VU30975 - Exposure of sensitive information to an unauthorized actor
CVE-2019-10156		 CWE-200 Medium
No
No
 - 31.07.2019 SB2019073113
SB2019080219
SB2021080804
and 10 more
#VU19193 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2019-10141		 CWE-89 High
No
No
 - 16.07.2019 SB2019071032
SB2019070914
SB2019081515
and 1 more
#VU19189 - Memory corruption
CVE-2018-20815		 CWE-119 Medium
No
No
 - 16.07.2019 SB2019042505
SB2019070604
SB2019073010
and 13 more
#VU19167 - Heap-based Buffer Overflow
CVE-2019-10192		 CWE-122 Medium
No
No
 - 14.07.2019 SB2019071109
SB2019071110
SB2019080804
and 9 more
#VU18664 - Improper Access Control
CVE-2019-3895		 CWE-284 Low
No
No
 - 03.06.2019 SB2019052710
SB2019071031
SB2019070220
#VU28397 - Exposure of sensitive information to an unauthorized actor
CVE-2018-12126		 CWE-200 Low
No
No
 - 30.05.2019 SB2019053012
SB2019051422
SB2019072469
and 67 more
#VU18303 - Missing release of memory after effective lifetime
CVE-2019-9824		 CWE-401 Low
No
No
 - 18.04.2019 SB2019041808
SB2019042505
SB2019080626
and 9 more
#VU18302 - Heap-based Buffer Overflow
CVE-2019-6778		 CWE-122 Low
No
No
 - 18.04.2019 SB2019041808
SB2019032903
SB2019022711
and 6 more
#VU18274 - Memory corruption
CVE-2019-6501		 CWE-119 Low
No
No
 - 15.04.2019 SB2019080806
SB2019080903
SB2019082235
#VU16554 - Integer overflow
CVE-2018-17958		 CWE-190 Low
No
No
 - 17.12.2018 SB2018121712
SB2018120730
SB2019080903
and 2 more
#VU16553 - Improper input validation
CVE-2018-15746		 CWE-20 Low
No
No
 - 16.12.2018 SB2018121712
SB2018120730
SB2019080903
and 4 more
#VU15997 - Buffer overflow
CVE-2018-17963		 CWE-120 Low
No
No
 - 21.11.2018 SB2018112121
SB2018121712
SB2018120730
and 4 more


Showing elements 81 - 100 out of 129