Known vulnerabilities in SUSE OpenStack Cloud 8 - page 25

Vendor: SUSE
Software: SUSE OpenStack Cloud
Version: 8
Software CPE: cpe:2.3:o:suse:suse_openstack_cloud:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 802
Public exploits: 42
Known exploited (KEV): 21

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE OpenStack Cloud version 8 SUSE OpenStack Cloud 8 is affected by 802 vulnerabilities: 12 critical, 229 high, 277 medium, 284 low Critical High Medium Low

Vulnerabilities (802)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU68855 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-39348		 CWE-79 Low
No
No
 - 31.10.2022 SB2022103137
SB20221115106
SB2022111743
and 12 more
#VU68518 - Heap-based Buffer Overflow
CVE-2022-39260		 CWE-122 High
No
No
 - 19.10.2022 SB2022101995
SB2022101996
SB2022101997
and 23 more
#VU67588 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2020-1734		 CWE-78 High
No
No
 - 22.09.2022 SB2022092241
SB2022092242
SB2020041808
and 1 more
#VU67555 - Incorrect Regular Expression
CVE-2022-40023		 CWE-185 Medium
No
No
 - 21.09.2022 SB2022092139
SB2022092141
SB2022102426
and 20 more
#VU66814 - Improper Access Control
CVE-2021-44225		 CWE-284 Low
No
No
 - 29.08.2022 SB2021112614
SB2022082931
SB2022083038
and 9 more
#VU66201 - Security Features
CVE-2022-2255		 CWE-254 Medium
No
No
 - 09.08.2022 SB2022080904
SB2022080914
SB2022111643
and 6 more
#VU65287 - Permissions, Privileges, and Access Controls
CVE-2022-29187		 CWE-264 Medium
No
No
 - 13.07.2022 SB2022071347
SB2022071348
SB2022071350
and 30 more
#VU64905 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-34265		 CWE-89 High
Public exploit available
No
 - 04.07.2022 SB2022070425
SB2022070438
SB2022080147
and 8 more
#VU64573 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2015-20107		 CWE-78 High
No
No
 - 22.06.2022 SB2022062206
SB2022062207
SB2022062436
and 85 more
#VU62830 - Heap-based Buffer Overflow
CVE-2022-24903		 CWE-122 High
No
No
 - 05.05.2022 SB2022050524
SB2022050920
SB2022052425
and 45 more
#VU62050 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-28346		 CWE-89 High
Public exploit available
No
 - 11.04.2022 SB2022041110
SB2022041125
SB2022041126
and 14 more
#VU61798 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-24790		 CWE-444 Medium
No
No
 - 01.04.2022 SB2022040112
SB2022052603
SB2022092241
and 12 more
#VU61488 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-24761		 CWE-444 Medium
No
No
 - 21.03.2022 SB2022032107
SB2022040525
SB2022040622
and 12 more
#VU58824 - Improper input validation
CVE-2021-44716		 CWE-20 Medium
No
No
 - 10.12.2021 SB2021121010
SB2021121011
SB2021121605
and 67 more
#VU57320 - Improper Access Control
CVE-2021-39226		 CWE-284 Medium
Public exploit available
Exploited
 - 12.10.2021 SB2021101262
SB2021101320
SB2021101321
and 22 more
#VU28793 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2020-13757		 CWE-327 Medium
No
No
 - 08.06.2020 SB2020060820
SB2020081913
SB2020090110
and 11 more
#VU26356 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-10109		 CWE-444 Medium
No
No
 - 24.03.2020 SB2020031234
SB2020032419
SB2020043028
and 9 more
#VU26355 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-10108		 CWE-444 Medium
No
No
 - 24.03.2020 SB2020031234
SB2020032419
SB2020043012
and 12 more
#VU24218 - Improper input validation
CVE-2019-11287		 CWE-20 Medium
No
No
 - 13.01.2020 SB2019112307
SB2020011311
SB2021062428
and 5 more
#VU31043 - Improper input validation
CVE-2019-12387		 CWE-20 Medium
No
No
 - 10.06.2019 SB2019061006
SB2019072125
SB2019072129
and 5 more


Showing elements 481 - 500 out of 802