Known vulnerabilities in SUSE OpenStack Cloud 9 - page 33

Vendor: SUSE
Version: 9
Software CPE: cpe:2.3:o:suse:suse_openstack_cloud:*:*:*:*:*:*:*:*
Total vulnerabilities: 1596
Public exploits: 71
Known exploited (KEV): 30
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE OpenStack Cloud version 9 SUSE OpenStack Cloud 9 is affected by 1596 vulnerabilities: 20 critical, 417 high, 518 medium, 641 low Critical High Medium Low

Vulnerabilities (1596)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU67588 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2020-1734
CWE-78 High
No
No
- 22.09.2022 SB2022092241
SB2022092242
SB2020041808
and 1 more
#VU67505 - Memory corruption
CVE-2022-40962
CWE-119 High
No
No
- 20.09.2022 SB2022092029
SB2022092120
SB2022092137
and 29 more
#VU67501 - Use After Free
CVE-2022-40960
CWE-416 High
No
No
- 20.09.2022 SB2022092029
SB2022092120
SB2022092137
and 29 more
#VU67500 - Security Features
CVE-2022-40959
CWE-254 Medium
No
No
- 20.09.2022 SB2022092029
SB2022092120
SB2022092137
and 29 more
#VU67475 - Improper input validation
CVE-2022-21385
CWE-20 Low
No
No
- 20.09.2022 SB2022092001
SB2022092006
SB2022092007
and 11 more
#VU67474 - Out-of-bounds write
CVE-2022-20369
CWE-787 Low
No
No
- 20.09.2022 SB2022092006
SB2022092007
SB2022092008
and 37 more
#VU67473 - Out-of-bounds read
CVE-2022-20368
CWE-125 Low
No
No
- 19.09.2022 SB2022092006
SB2022092007
SB2022092008
and 44 more
#VU67414 - Improper Validation of Array Index
CVE-2022-35737
CWE-129 Medium
Public exploit available
No
- 15.09.2022 SB2022091537
SB2022092034
SB2022092682
and 72 more
#VU66811 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2020-36516
CWE-327 Medium
No
No
- 29.08.2022 SB2022022601
SB2022082925
SB2022082926
and 40 more
#VU66589 - NULL Pointer Dereference
CVE-2020-36558
CWE-476 Low
No
No
- 17.08.2022 SB2022081735
SB2022081739
SB2022081740
and 32 more
#VU66588 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2020-36557
CWE-362 Low
No
No
- 17.08.2022 SB2022081734
SB2022081739
SB2022081740
and 21 more
#VU66549 - Permissions, Privileges, and Access Controls
CVE-2022-26373
CWE-264 Low
No
No
- 16.08.2022 SB2022081642
SB2022081647
SB2022081745
and 64 more
#VU66397 - Double Free
CVE-2022-2588
CWE-415 Low
Public exploit available
Exploited
- 11.08.2022 SB2022081109
SB2022081110
SB2022081111
and 99 more
#VU64905 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-34265
CWE-89 High
Public exploit available
No
- 04.07.2022 SB2022070425
SB2022070438
SB2022080147
and 8 more
#VU64208 - Permissions, Privileges, and Access Controls
CVE-2022-20166
CWE-264 Low
No
No
- 13.06.2022 SB2022061414
SB2022081739
SB2022081740
and 16 more
#VU63627 - Memory corruption
CVE-2021-36690
CWE-119 Low
No
No
- 25.05.2022 SB2022050533
SB2022071831
SB2022092034
and 16 more
#VU62050 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-28346
CWE-89 High
Public exploit available
No
- 11.04.2022 SB2022041110
SB2022041125
SB2022041126
and 14 more
#VU61798 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-24790
CWE-444 Medium
No
No
- 01.04.2022 SB2022040112
SB2022052603
SB2022092241
and 12 more
#VU57320 - Improper Access Control
CVE-2021-39226
CWE-284 Medium
Public exploit available
Exploited
- 12.10.2021 SB2021101262
SB2021101320
SB2021101321
and 22 more
#VU24218 - Improper input validation
CVE-2019-11287
CWE-20 Medium
No
No
- 13.01.2020 SB2019112307
SB2020011311
SB2021062428
and 5 more


Showing elements 641 - 660 out of 1596