Known vulnerabilities in SUSE OpenStack Cloud 8 - page 10

Vendor: SUSE
Version: 8
Software CPE: cpe:2.3:o:suse:suse_openstack_cloud:*:*:*:*:*:*:*:*
Total vulnerabilities: 802
Public exploits: 42
Known exploited (KEV): 21

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE OpenStack Cloud version 8 SUSE OpenStack Cloud 8 is affected by 802 vulnerabilities: 12 critical, 229 high, 277 medium, 284 low Critical High Medium Low

Vulnerabilities (802)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU75486 - Improper input validation
CVE-2023-29007
CWE-20 Low
Public exploit available
No
- 25.04.2023 SB2023042553
SB2023042610
SB2023042629
and 48 more
#VU75485 - Insufficient Verification of Data Authenticity
CVE-2023-25815
CWE-345 Low
No
No
- 25.04.2023 SB2023042553
SB2023042610
SB2023042638
and 40 more
#VU75484 - Improper Link Resolution Before File Access ('Link Following')
CVE-2023-25652
CWE-59 Low
No
No
- 25.04.2023 SB2023042553
SB2023042610
SB2023042629
and 48 more
#VU75389 - Resource exhaustion
CVE-2023-28450
CWE-400 Medium
No
No
- 20.04.2023 SB2023042040
SB2023042041
SB2023042042
and 30 more
#VU72036 - Error Handling
CVE-2023-23931
CWE-388 Low
No
No
- 08.02.2023 SB2023020813
SB2023030952
SB2023031419
and 69 more
#VU71714 - External Control of File Name or Path
CVE-2022-47951
CWE-73 Medium
No
No
- 31.01.2023 SB2023013129
SB2023013130
SB2023013131
and 15 more
#VU63947 - Memory corruption
CVE-2022-1270
CWE-119 High
No
No
- 02.06.2022 SB2022060208
SB2022092951
SB2022112601
and 6 more
#VU63126 - Permissions, Privileges, and Access Controls
CVE-2022-1552
CWE-264 Medium
No
No
- 12.05.2022 SB2022051213
SB2022051303
SB2022051304
and 48 more
#VU62851 - Memory corruption
CVE-2022-28463
CWE-119 High
No
No
- 09.05.2022 SB2022050924
SB2022060125
SB2022060203
and 9 more
#VU61422 - Reliance on Reverse DNS Resolution for a Security-Critical Action
CVE-2021-25220
CWE-350 Medium
No
No
- 17.03.2022 SB2022031701
SB2022031719
SB2022031725
and 57 more
#VU59320 - Resource exhaustion
CVE-2021-40797
CWE-400 Medium
No
No
- 09.01.2022 SB2021090835
SB2022010907
SB2022032433
and 3 more
#VU58503 - Cross-Site Request Forgery (CSRF)
CVE-2021-44227
CWE-352 Medium
No
No
- 03.12.2021 SB2021120305
SB2021120306
SB2021120314
and 12 more
#VU58350 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2021-43332
CWE-338 Low
No
No
- 24.11.2021 SB2021112406
SB2021111823
SB2022053136
and 2 more
#VU58349 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-43331
CWE-79 Low
No
No
- 24.11.2021 SB2021112406
SB2021111823
SB2022053136
and 2 more
#VU58348 - Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)
CVE-2021-42096
CWE-338 Medium
No
No
- 24.11.2021 SB2021112405
SB2021112417
SB2021112419
and 9 more
#VU57242 - Improper Access Control
CVE-2021-40085
CWE-284 Low
No
No
- 12.10.2021 SB2021101209
SB2022053134
SB2023051224
and 5 more
#VU11306 - Stack-based buffer overflow
CVE-2018-1000140
CWE-121 High
No
Exploited
- 28.03.2018 SB2018032808
SB2018032809
SB2018032810
and 14 more
#VU8838 - Key Management Errors
CVE-2017-13078
CWE-320 High
No
No
- 17.10.2017 SB2017101702
SB2017101704
SB2017101706
and 30 more
#VU8837 - Key Management Errors
CVE-2017-13077
CWE-320 High
No
No
- 17.10.2017 SB2017101702
SB2017101704
SB2017101706
and 27 more
#VU40604 - Improper input validation
CVE-2015-8041
CWE-20 Medium
No
No
- 09.11.2015 SB2015110914
SB2022052630


Showing elements 181 - 200 out of 802