Known vulnerabilities in SUSE OpenStack Cloud 9 - page 41

Vendor: SUSE
Software: SUSE OpenStack Cloud
Version: 9
Software CPE: cpe:2.3:o:suse:suse_openstack_cloud:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 1596
Public exploits: 71
Known exploited (KEV): 30
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE OpenStack Cloud version 9 SUSE OpenStack Cloud 9 is affected by 1596 vulnerabilities: 20 critical, 417 high, 518 medium, 641 low Critical High Medium Low

Vulnerabilities (1596)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU64433 - Out-of-bounds read
CVE-2021-39711		 CWE-125 Low
No
No
 - 16.06.2022 SB2022061633
SB2022061635
SB2022061725
and 5 more
#VU64404 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-43815		 CWE-22 Low
No
No
 - 15.06.2022 SB2021121022
SB2022062026
SB2022102094
and 8 more
#VU64402 - Exposure of sensitive information to an unauthorized actor
CVE-2022-21673		 CWE-200 Low
No
No
 - 15.06.2022 SB2022061623
SB2022062026
SB2022081215
and 12 more
#VU64399 - Cross-Site Request Forgery (CSRF)
CVE-2022-21703		 CWE-352 Medium
No
No
 - 15.06.2022 SB2022061621
SB2022062026
SB2022102094
and 14 more
#VU64397 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-21702		 CWE-79 Low
No
No
 - 15.06.2022 SB2022061621
SB2022062026
SB2022102094
and 14 more
#VU64394 - Authorization Bypass Through User-Controlled Key
CVE-2022-21713		 CWE-639 Low
No
No
 - 15.06.2022 SB2022061621
SB2022062026
SB2022102094
and 13 more
#VU64089 - Improper Authentication
CVE-2022-31813		 CWE-287 Medium
No
No
 - 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 49 more
#VU64088 - Out-of-bounds read
CVE-2022-30556		 CWE-125 Medium
No
No
 - 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 31 more
#VU64086 - Resource exhaustion
CVE-2022-30522		 CWE-400 Medium
No
No
 - 08.06.2022 SB2022060817
SB2022060901
SB2022061723
and 31 more
#VU64085 - Improper input validation
CVE-2022-29404		 CWE-20 Medium
No
No
 - 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 30 more
#VU64083 - Out-of-bounds read
CVE-2022-28615		 CWE-125 Low
No
No
 - 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 41 more
#VU64081 - Out-of-bounds read
CVE-2022-28614		 CWE-125 Low
No
No
 - 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 36 more
#VU64078 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-26377		 CWE-444 Medium
Public exploit available
No
 - 08.06.2022 SB2022060817
SB2022060901
SB2022061611
and 39 more
#VU63385 - Improper Validation of Array Index
CVE-2021-43389		 CWE-129 Low
No
No
 - 18.05.2022 SB2022061635
SB2022061725
SB2022061728
and 37 more
#VU63383 - NULL Pointer Dereference
CVE-2021-38208		 CWE-476 Low
No
No
 - 18.05.2022 SB2022061630
SB2022061634
SB2022061635
and 12 more
#VU63382 - Use After Free
CVE-2021-20292		 CWE-416 Low
No
No
 - 18.05.2022 SB2022061630
SB2022061634
SB2022061635
and 13 more
#VU61017 - Memory corruption
CVE-2022-21716		 CWE-119 Medium
No
No
 - 04.03.2022 SB2022030407
SB2022032438
SB2022032448
and 17 more
#VU60490 - Improper input validation
CVE-2021-33061		 CWE-20 Low
No
No
 - 10.02.2022 SB2022021004
SB2022061630
SB2022061631
and 31 more
#VU59084 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2021-20321		 CWE-362 Low
No
No
 - 22.12.2021 SB2021122207
SB2021122216
SB2021122218
and 29 more
#VU34374 - Improper input validation
CVE-2019-20811		 CWE-20 Low
No
No
 - 03.06.2020 SB2020060360
SB2020112302
SB2020112432
and 16 more


Showing elements 801 - 820 out of 1596