Known vulnerabilities in golang-github-prometheus-promu - page 2

Vendor: SUSE

Software: golang-github-prometheus-promu

Software CPE: cpe:2.3:o:suse:golang-github-prometheus-promu:*:*:*:*:*:suse_linux:*:*

Website: https://www.suse.com/

Total vulnerabilities: 81

Public exploits: 7

Known exploited (KEV): 2

Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Vulnerabilities (81)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU87845 - Improper Authorization CVE-2024-1313	CWE-285	Medium	No	No	0.14.0-1.18.1, 0.14.0-150000.3.18.2	27.03.2024	SB2024032711 SB2024043089 SB2024050720 and 10 more
#VU85621 - Missing release of memory after effective lifetime CVE-2024-0690	CWE-401	Low	No	No	0.14.0-150000.3.18.2	19.01.2024	SB2024011931 SB2024011933 SB2024011934 and 11 more
#VU84381 - Improper Control of Generation of Code ('Code Injection') CVE-2023-5764	CWE-94	Medium	No	No	0.14.0-150000.3.18.2	13.12.2023	SB2023121315 SB2023121316 SB2023121317 and 16 more
#VU72132 - Improper Authentication CVE-2022-39229	CWE-287	Low	No	No	0.14.0-4.12.2	12.02.2023	SB2023021201 SB2023021202 SB2023021203 and 13 more
#VU72131 - Exposure of sensitive information to an unauthorized actor CVE-2022-39201	CWE-200	Medium	No	No	0.14.0-4.12.2	12.02.2023	SB2023021201 SB2023021202 SB2023021203 and 12 more
#VU71566 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing) CVE-2022-39324	CWE-451	Low	No	No	0.14.0-4.12.2	26.01.2023	SB2023012631 SB2023032032 SB2023032033 and 12 more
#VU69485 - Exposure of sensitive information to an unauthorized actor CVE-2022-39307	CWE-200	Medium	No	No	0.14.0-4.12.2	22.11.2022	SB2022112220 SB2023021202 SB2023021203 and 12 more
#VU69484 - Improper input validation CVE-2022-39306	CWE-20	Medium	No	No	0.14.0-4.12.2	22.11.2022	SB2022112220 SB2023021202 SB2023021203 and 12 more
#VU57320 - Improper Access Control CVE-2021-39226	CWE-284	Medium	Available	Exploited	0.14.0-4.12.2	12.10.2021	SB2021101262 SB2021101320 SB2021101321 and 22 more
#VU47274 - Improper Verification of Cryptographic Signature CVE-2020-14365	CWE-347	Low	No	No	0.14.0-150000.3.18.2	23.09.2020	SB2020092344 SB2020100222 SB2020102019 and 12 more
#VU47114 - Improper input validation CVE-2020-14330	CWE-20	Low	No	No	0.14.0-150000.3.18.2	11.09.2020	SB2020092608 SB2020102017 SB2021080804 and 8 more
#VU47115 - Information Exposure Through Log Files CVE-2020-14332	CWE-532	Low	No	No	0.14.0-150000.3.18.2	11.09.2020	SB2020092609 SB2020102018 SB2021080804 and 7 more
#VU29567 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') CVE-2020-10744	CWE-362	Low	No	No	0.14.0-150000.3.18.2	07.07.2020	SB2020051522 SB2024050721
#VU29029 - Information Exposure Through Log Files CVE-2020-1753	CWE-532	Low	No	No	0.14.0-150000.3.18.2	15.06.2020	SB2020032420 SB2020061518 SB2021080804 and 11 more
#VU36806 - Key Management Errors CVE-2016-8614	CWE-320	Medium	No	No	0.14.0-150000.3.18.2	31.07.2018	SB2018073121 SB2024050721 SB2016110217 and 7 more
#VU36808 - Command injection CVE-2016-8628	CWE-77	High	No	No	0.14.0-150000.3.18.2	31.07.2018	SB2018073121 SB2024050721 SB2016110217 and 8 more
#VU14157 - Permissions, Privileges, and Access Controls CVE-2018-10874	CWE-264	Low	No	No	0.14.0-150000.3.18.2	31.07.2018	SB2018080113 SB2018073118 SB2019011610 and 10 more
#VU12555 - Information Exposure Through Log Files CVE-2017-7550	CWE-532	Low	No	No	0.14.0-150000.3.18.2	05.03.2018	SB2018030511 SB2017101940 SB2024050718 and 4 more
#VU7411 - Improper input validation CVE-2016-8647	CWE-20	Low	No	No	0.14.0-150000.3.18.2	11.07.2017	SB2017070615 SB2024050718 SB2024050721 and 4 more
#VU6639 - Improper input validation CVE-2017-7466	CWE-20	Medium	Available	No	0.14.0-150000.3.18.2	17.05.2017	SB2017052310 SB2017052601 SB2017070615 and 22 more

Showing elements 21 - 40 out of 81

Known vulnerabilities in golang-github-prometheus-promu - page 2

Breakdown by Severity Chart

Vulnerabilities (81)

Please verify you're human