Known vulnerabilities in SUSE OpenStack Cloud - page 33

Vendor: SUSE
Software: SUSE OpenStack Cloud
Software CPE: cpe:2.3:o:suse:suse_openstack_cloud:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 1686
Public exploits: 73
Known exploited (KEV): 30
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SUSE OpenStack Cloud SUSE OpenStack Cloud is affected by 1686 known vulnerabilities: 20 critical, 424 high, 541 medium, 701 low Critical High Medium Low

Vulnerabilities (1686)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU67588 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2020-1734		 CWE-78 High
No
No
 - 22.09.2022 SB2022092241
SB2022092242
SB2020041808
and 1 more
#VU67532 - Use After Free
CVE-2022-40674		 CWE-416 High
No
No
 - 21.09.2022 SB2022092118
SB2022092119
SB2022092317
and 111 more
#VU67505 - Memory corruption
CVE-2022-40962		 CWE-119 High
No
No
 - 20.09.2022 SB2022092029
SB2022092120
SB2022092137
and 29 more
#VU67504 - Improper input validation
CVE-2022-40957		 CWE-20 Medium
No
No
 - 20.09.2022 SB2022092029
SB2022092120
SB2022092137
and 28 more
#VU67503 - Security Features
CVE-2022-40956		 CWE-254 Medium
No
No
 - 20.09.2022 SB2022092029
SB2022092120
SB2022092137
and 30 more
#VU67502 - Security Features
CVE-2022-40958		 CWE-254 Medium
No
No
 - 20.09.2022 SB2022092029
SB2022092120
SB2022092137
and 30 more
#VU67501 - Use After Free
CVE-2022-40960		 CWE-416 High
No
No
 - 20.09.2022 SB2022092029
SB2022092120
SB2022092137
and 29 more
#VU67500 - Security Features
CVE-2022-40959		 CWE-254 Medium
No
No
 - 20.09.2022 SB2022092029
SB2022092120
SB2022092137
and 29 more
#VU67414 - Improper Validation of Array Index
CVE-2022-35737		 CWE-129 Medium
Available
No
 - 15.09.2022 SB2022091537
SB2022092034
SB2022092682
and 72 more
#VU66811 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2020-36516		 CWE-327 Medium
No
No
 - 29.08.2022 SB2022022601
SB2022082925
SB2022082926
and 40 more
#VU66589 - NULL Pointer Dereference
CVE-2020-36558		 CWE-476 Low
No
No
 - 17.08.2022 SB2022081735
SB2022081739
SB2022081740
and 32 more
#VU66588 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2020-36557		 CWE-362 Low
No
No
 - 17.08.2022 SB2022081734
SB2022081739
SB2022081740
and 21 more
#VU64905 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-34265		 CWE-89 High
Available
No
 - 04.07.2022 SB2022070425
SB2022070438
SB2022080147
and 8 more
#VU64208 - Permissions, Privileges, and Access Controls
CVE-2022-20166		 CWE-264 Low
No
No
 - 13.06.2022 SB2022061414
SB2022081739
SB2022081740
and 16 more
#VU63627 - Memory corruption
CVE-2021-36690		 CWE-119 Low
No
No
 - 25.05.2022 SB2022050533
SB2022071831
SB2022092034
and 16 more
#VU62050 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-28346		 CWE-89 High
Available
No
 - 11.04.2022 SB2022041110
SB2022041125
SB2022041126
and 14 more
#VU61798 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-24790		 CWE-444 Medium
No
No
 - 01.04.2022 SB2022040112
SB2022052603
SB2022092241
and 12 more
#VU58824 - Improper input validation
CVE-2021-44716		 CWE-20 Medium
No
No
 - 10.12.2021 SB2021121010
SB2021121011
SB2021121605
and 67 more
#VU57320 - Improper Access Control
CVE-2021-39226		 CWE-284 Medium
Available
Exploited
 - 12.10.2021 SB2021101262
SB2021101320
SB2021101321
and 22 more
#VU24218 - Improper input validation
CVE-2019-11287		 CWE-20 Medium
No
No
 - 13.01.2020 SB2019112307
SB2020011311
SB2021062428
and 5 more


Showing elements 641 - 660 out of 1686