Known vulnerabilities in SUSE OpenStack Cloud - page 15

Vendor: SUSE
Software: SUSE OpenStack Cloud
Software CPE: cpe:2.3:o:suse:suse_openstack_cloud:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 1686
Public exploits: 73
Known exploited (KEV): 30
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SUSE OpenStack Cloud SUSE OpenStack Cloud is affected by 1686 known vulnerabilities: 20 critical, 424 high, 541 medium, 701 low Critical High Medium Low

Vulnerabilities (1686)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU71620 - Heap-based Buffer Overflow
CVE-2022-48281		 CWE-122 High
No
No
 - 30.01.2023 SB2023013012
SB2023013014
SB2023013015
and 27 more
#VU71560 - Heap-based Buffer Overflow
CVE-2023-0288		 CWE-122 High
No
No
 - 26.01.2023 SB2023012622
SB2023013071
SB2023013073
and 15 more
#VU71558 - Heap-based Buffer Overflow
CVE-2023-0433		 CWE-122 High
No
No
 - 26.01.2023 SB2023012624
SB2023012627
SB2023013071
and 21 more
#VU71486 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2021-20251		 CWE-362 Low
No
No
 - 24.01.2023 SB2023012451
SB2023012452
SB2023012453
and 13 more
#VU71473 - Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection')
CVE-2022-4254		 CWE-90 High
No
No
 - 24.01.2023 SB2023012437
SB2023012440
SB2023012457
and 13 more
#VU71243 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2022-37436		 CWE-113 Medium
No
No
 - 17.01.2023 SB2023011740
SB2023011805
SB2023012728
and 33 more
#VU71242 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-36760		 CWE-444 Medium
No
No
 - 17.01.2023 SB2023011740
SB2023011805
SB2023012728
and 33 more
#VU71241 - Memory corruption
CVE-2006-20001		 CWE-119 Medium
No
No
 - 17.01.2023 SB2023011740
SB2023011805
SB2023012728
and 28 more
#VU71236 - Untrusted Search Path
CVE-2022-4883		 CWE-426 Low
No
No
 - 17.01.2023 SB2023011734
SB2023011737
SB2023011806
and 38 more
#VU71235 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-44617		 CWE-835 Low
No
No
 - 17.01.2023 SB2023011734
SB2023011737
SB2023011806
and 34 more
#VU71234 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-46285		 CWE-835 Low
Available
No
 - 17.01.2023 SB2023011734
SB2023011737
SB2023011806
and 35 more
#VU70723 - Out-of-bounds write
CVE-2023-0054		 CWE-787 High
No
No
 - 05.01.2023 SB2023010521
SB2023013071
SB2023013073
and 16 more
#VU70722 - Heap-based Buffer Overflow
CVE-2023-0051		 CWE-122 High
No
No
 - 05.01.2023 SB2023010521
SB2023010522
SB2023013071
and 14 more
#VU70721 - Out-of-bounds read
CVE-2023-0049		 CWE-125 Low
No
No
 - 05.01.2023 SB2023010521
SB2023010522
SB2023013071
and 18 more
#VU70135 - Incorrect Comparison
CVE-2022-4293		 CWE-697 Low
No
No
 - 13.12.2022 SB2022121301
SB2022121303
SB2022122818
and 10 more
#VU70134 - Use After Free
CVE-2022-4292		 CWE-416 High
No
No
 - 13.12.2022 SB2022121301
SB2022121303
SB2022122818
and 14 more
#VU69153 - Exposure of sensitive information to an unauthorized actor
CVE-2022-23824		 CWE-200 Medium
No
No
 - 09.11.2022 SB2022110914
SB2023012540
SB2023012654
and 9 more
#VU69094 - Permissions, Privileges, and Access Controls
CVE-2022-37966		 CWE-264 High
No
No
 - 08.11.2022 SB2022110822
SB2022121537
SB2022121801
and 23 more
#VU67750 - Externally-generated error message containing sensitive information
CVE-2022-39176		 CWE-211 Low
No
No
 - 29.09.2022 SB2022062042
SB2023012655
SB2023012656
and 5 more
#VU64523 - Improper input validation
CVE-2022-39177		 CWE-20 Medium
No
No
 - 20.06.2022 SB2022062042
SB2022062043
SB2023012655
and 6 more


Showing elements 281 - 300 out of 1686