Known vulnerabilities in SUSE OpenStack Cloud Crowbar 8

Vendor: SUSE
Software: SUSE OpenStack Cloud Crowbar
Version: 8
Software CPE: cpe:2.3:o:suse:suse_openstack_cloud_crowbar:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 799
Public exploits: 40
Known exploited (KEV): 18
Highest CVSSv4 Score: 9.4

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting SUSE OpenStack Cloud Crowbar version 8 SUSE OpenStack Cloud Crowbar 8 is affected by 799 vulnerabilities: 10 critical, 218 high, 288 medium, 283 low Critical High Medium Low

Vulnerabilities (799)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU88063 - Memory corruption
CVE-2024-28219		 CWE-119 Medium
No
No
 - 03.04.2024 SB2024040318
SB2024040320
SB2024040844
and 28 more
#VU87033 - Inefficient Regular Expression Complexity
CVE-2024-27351		 CWE-1333 Medium
No
No
 - 04.03.2024 SB2024030431
SB2024030441
SB2024030442
and 21 more
#VU85743 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-50447		 CWE-94 High
No
No
 - 24.01.2024 SB2024012413
SB2024012417
SB2024012465
and 34 more
#VU83261 - Resource exhaustion
CVE-2023-44271		 CWE-400 Medium
No
No
 - 18.11.2023 SB2023111809
SB2023111810
SB2023111811
and 25 more
#VU82978 - Exposure of sensitive information to an unauthorized actor
CVE-2023-45803		 CWE-200 Medium
No
No
 - 10.11.2023 SB2023111038
SB2023111040
SB2023111048
and 122 more
#VU82969 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-41419		 CWE-444 Medium
No
No
 - 10.11.2023 SB2023111023
SB2023111029
SB2023111031
and 17 more
#VU81657 - Resource exhaustion
CVE-2023-43665		 CWE-400 Medium
No
No
 - 05.10.2023 SB2023100544
SB2023100545
SB2023100546
and 16 more
#VU81322 - Exposure of sensitive information to an unauthorized actor
CVE-2023-43804		 CWE-200 Low
Public exploit available
No
 - 02.10.2023 SB2023100251
SB2023100259
SB2023100260
and 112 more
#VU80637 - Heap-based Buffer Overflow
CVE-2023-4863		 CWE-122 Critical
Public exploit available
Exploited
 - 11.09.2023 SB2023091178
SB2023091245
SB2023091265
and 137 more
#VU80395 - Resource exhaustion
CVE-2023-41164		 CWE-400 Medium
No
No
 - 04.09.2023 SB2023090432
SB2023090550
SB2023091166
and 19 more
#VU77880 - Inefficient Regular Expression Complexity
CVE-2023-36053		 CWE-1333 Medium
No
No
 - 03.07.2023 SB2023070325
SB2023070532
SB2023071502
and 16 more
#VU77734 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-28362		 CWE-79 Low
No
No
 - 27.06.2023 SB2023062718
SB2023080864
SB2023080948
and 3 more
#VU76397 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-28370		 CWE-601 Medium
No
No
 - 22.05.2023 SB2023052204
SB2023061333
SB2023062257
and 28 more
#VU75789 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-23520		 CWE-79 Medium
No
No
 - 08.05.2023 SB2023050801
SB2023050806
SB2023090549
and 2 more
#VU75788 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-23519		 CWE-79 Medium
No
No
 - 08.05.2023 SB2023050801
SB2023050806
SB2023090549
and 2 more
#VU75787 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-23518		 CWE-79 Medium
No
No
 - 08.05.2023 SB2023050801
SB2023050806
SB2023090549
and 2 more
#VU75786 - Incorrect Regular Expression
CVE-2022-23517		 CWE-185 Medium
No
No
 - 08.05.2023 SB2023050801
SB2023050806
SB2023090549
and 1 more
#VU75412 - Resource exhaustion
CVE-2023-30608		 CWE-400 Medium
No
No
 - 21.04.2023 SB2023042135
SB2023051047
SB2023060826
and 13 more
#VU74824 - Double Free
CVE-2023-1999		 CWE-415 High
No
No
 - 11.04.2023 SB2023041129
SB2023041192
SB2023042845
and 40 more
#VU60003 - Exposed Dangerous Method or Function
CVE-2022-22817		 CWE-749 High
No
No
 - 25.01.2022 SB2022012523
SB2022012526
SB2022022226
and 26 more


Showing elements 1 - 20 out of 799