Known vulnerabilities in SUSE OpenStack Cloud 9 - page 59

Vendor: SUSE
Software: SUSE OpenStack Cloud
Version: 9
Software CPE: cpe:2.3:o:suse:suse_openstack_cloud:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 1596
Public exploits: 71
Known exploited (KEV): 30
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE OpenStack Cloud version 9 SUSE OpenStack Cloud 9 is affected by 1596 vulnerabilities: 20 critical, 417 high, 518 medium, 641 low Critical High Medium Low

Vulnerabilities (1596)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU66467 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-42771		 CWE-22 Medium
No
No
 - 12.08.2022 SB20211214110
SB2022081226
SB2022083038
and 18 more
#VU63043 - Out-of-bounds read
CVE-2021-4156		 CWE-125 Medium
No
No
 - 11.05.2022 SB2022032803
SB2022051131
SB2022051158
and 11 more
#VU62737 - Improper Locking
CVE-2021-4147		 CWE-667 Low
No
No
 - 03.05.2022 SB2022050308
SB2022010425
SB2022010528
and 6 more
#VU59057 - Server-Side Request Forgery (SSRF)
CVE-2021-44224		 CWE-918 Medium
No
No
 - 20.12.2021 SB2021122005
SB2021122021
SB2021122709
and 33 more
#VU59056 - Memory corruption
CVE-2021-44790		 CWE-119 Critical
Public exploit available
No
 - 20.12.2021 SB2021122005
SB2021122021
SB2022010513
and 50 more
#VU59048 - Out-of-bounds write
CVE-2021-4011		 CWE-787 Low
No
No
 - 17.12.2021 SB2021121702
SB2021121703
SB2021122215
and 22 more
#VU59046 - Out-of-bounds write
CVE-2021-4009		 CWE-787 Low
No
No
 - 17.12.2021 SB2021121702
SB2021121703
SB2021122215
and 21 more
#VU59045 - Out-of-bounds write
CVE-2021-4008		 CWE-787 Low
No
No
 - 17.12.2021 SB2021121702
SB2021121703
SB2021122215
and 22 more
#VU58816 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44228		 CWE-94 Critical
Public exploit available
Exploited
 - 10.12.2021 SB2021121003
SB2021121101
SB2021121201
and 338 more
#VU58612 - Exposure of sensitive information to an unauthorized actor
CVE-2021-43542		 CWE-200 Low
No
No
 - 07.12.2021 SB2021120711
SB2021120712
SB2021120818
and 29 more
#VU58611 - Improper input validation
CVE-2021-43541		 CWE-20 Low
No
No
 - 07.12.2021 SB2021120711
SB2021120712
SB2021120818
and 29 more
#VU58608 - Use After Free
CVE-2021-43539		 CWE-416 High
No
No
 - 07.12.2021 SB2021120711
SB2021120712
SB2021120818
and 30 more
#VU58607 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2021-43538		 CWE-451 Medium
No
No
 - 07.12.2021 SB2021120711
SB2021120712
SB2021120818
and 29 more
#VU58586 - Type conversion
CVE-2021-43537		 CWE-704 High
No
No
 - 07.12.2021 SB2021120711
SB2021120712
SB2021120818
and 29 more
#VU58585 - Exposure of sensitive information to an unauthorized actor
CVE-2021-43536		 CWE-200 Low
No
No
 - 07.12.2021 SB2021120711
SB2021120712
SB2021120818
and 29 more
#VU58358 - Use After Free
CVE-2021-3975		 CWE-416 Low
No
No
 - 24.11.2021 SB2021112416
SB2021112418
SB2022050308
and 8 more
#VU57511 - Improper input validation
CVE-2021-35604		 CWE-20 Medium
No
No
 - 19.10.2021 SB2021101944
SB2022032018
SB2022060129
and 32 more
#VU46134 - Improper Link Resolution Before File Access ('Link Following')
CVE-2020-14367		 CWE-59 Medium
No
No
 - 31.08.2020 SB2020083109
SB2020083110
SB2020082303
and 6 more
#VU45745 - Incorrect Permission Assignment for Critical Resource
CVE-2020-15862		 CWE-732 Medium
No
No
 - 17.08.2020 SB2020081707
SB2020082704
SB2020111826
and 22 more
#VU29491 - Improper Validation of Certificate with Host Mismatch
CVE-2020-13645		 CWE-297 Medium
No
No
 - 03.07.2020 SB2020052813
SB2020052814
SB2020072731
and 7 more


Showing elements 1161 - 1180 out of 1596