Known vulnerabilities in SUSE OpenStack Cloud Crowbar - page 13

Vendor: SUSE
Software: SUSE OpenStack Cloud Crowbar
Software CPE: cpe:2.3:o:suse:suse_openstack_cloud_crowbar:*:*:*:*:*:*:*:*
Website: https://www.suse.com/
Total vulnerabilities: 1656
Public exploits: 70
Known exploited (KEV): 27

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SUSE OpenStack Cloud Crowbar SUSE OpenStack Cloud Crowbar is affected by 1656 known vulnerabilities: 18 critical, 414 high, 550 medium, 674 low Critical High Medium Low

Vulnerabilities (1656)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU82969 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2023-41419		 CWE-444 Medium
No
No
 - 10.11.2023 SB2023111023
SB2023111029
SB2023111031
and 17 more
#VU80932 - Off-by-one Error
CVE-2023-4504		 CWE-193 High
No
No
 - 20.09.2023 SB2023092051
SB2023092052
SB2023092054
and 26 more
#VU80637 - Heap-based Buffer Overflow
CVE-2023-4863		 CWE-122 Critical
Available
Exploited
 - 11.09.2023 SB2023091178
SB2023091245
SB2023091265
and 137 more
#VU80395 - Resource exhaustion
CVE-2023-41164		 CWE-400 Medium
No
No
 - 04.09.2023 SB2023090432
SB2023090550
SB2023091166
and 19 more
#VU78844 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2023-37464		 CWE-327 Medium
No
No
 - 01.08.2023 SB2023080146
SB2023080147
SB2023080164
and 14 more
#VU78577 - Out-of-bounds read
CVE-2022-2127		 CWE-125 Medium
No
No
 - 24.07.2023 SB2023072430
SB2023072432
SB2023072433
and 34 more
#VU78067 - Use After Free
CVE-2023-3600		 CWE-416 High
No
No
 - 11.07.2023 SB2023071154
SB2023071240
SB2023072136
and 31 more
#VU77945 - Security Features
CVE-2023-3482		 CWE-254 Medium
No
No
 - 04.07.2023 SB2023070433
SB2023070528
SB2023071727
and 5 more
#VU77940 - Use After Free
CVE-2023-37201		 CWE-416 High
No
No
 - 04.07.2023 SB2023070433
SB2023070434
SB2023070448
and 35 more
#VU77939 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2023-36664		 CWE-78 High
Available
No
 - 04.07.2023 SB2023070430
SB2023070432
SB2023071037
and 18 more
#VU77880 - Inefficient Regular Expression Complexity
CVE-2023-36053		 CWE-1333 Medium
No
No
 - 03.07.2023 SB2023070325
SB2023070532
SB2023071502
and 16 more
#VU77734 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2023-28362		 CWE-79 Low
No
No
 - 27.06.2023 SB2023062718
SB2023080864
SB2023080948
and 3 more
#VU77641 - Use After Free
CVE-2023-34241		 CWE-416 Medium
No
No
 - 22.06.2023 SB2023062261
SB2023062272
SB2023062276
and 36 more
#VU76668 - Memory corruption
CVE-2023-32763		 CWE-119 High
No
No
 - 30.05.2023 SB2023053068
SB2023070436
SB2023071741
and 17 more
#VU76308 - Improper Authentication
CVE-2023-32360		 CWE-287 Medium
No
No
 - 18.05.2023 SB2023051860
SB2023051901
SB2023051902
and 36 more
#VU75789 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-23520		 CWE-79 Medium
No
No
 - 08.05.2023 SB2023050801
SB2023050806
SB2023090549
and 2 more
#VU75788 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-23519		 CWE-79 Medium
No
No
 - 08.05.2023 SB2023050801
SB2023050806
SB2023090549
and 2 more
#VU75787 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-23518		 CWE-79 Medium
No
No
 - 08.05.2023 SB2023050801
SB2023050806
SB2023090549
and 2 more
#VU75786 - Incorrect Regular Expression
CVE-2022-23517		 CWE-185 Medium
No
No
 - 08.05.2023 SB2023050801
SB2023050806
SB2023090549
and 1 more
#VU66024 - Memory corruption
CVE-2022-32084		 CWE-119 Low
No
No
 - 03.08.2022 SB2022080403
SB2022080424
SB2022081650
and 35 more


Showing elements 241 - 260 out of 1656