Known vulnerabilities in SUSE OpenStack Cloud Crowbar - page 40

Vendor: SUSE
Software CPE: cpe:2.3:o:suse:suse_openstack_cloud_crowbar:*:*:*:*:*:*:*:*
Total vulnerabilities: 1656
Public exploits: 70
Known exploited (KEV): 27

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SUSE OpenStack Cloud Crowbar SUSE OpenStack Cloud Crowbar is affected by 1656 known vulnerabilities: 18 critical, 414 high, 550 medium, 674 low Critical High Medium Low

Vulnerabilities (1656)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU73681 - Memory corruption
CVE-2023-28177
CWE-119 High
No
No
- 14.03.2023 SB2023031479
SB2023031502
SB2023031601
and 6 more
#VU73680 - Permissions, Privileges, and Access Controls
CVE-2023-28161
CWE-264 Medium
No
No
- 14.03.2023 SB2023031479
SB2023031502
SB2023031601
and 6 more
#VU73679 - Exposure of sensitive information to an unauthorized actor
CVE-2023-28160
CWE-200 Low
No
No
- 14.03.2023 SB2023031479
SB2023031502
SB2023031601
and 6 more
#VU73675 - Memory corruption
CVE-2023-28176
CWE-119 High
No
No
- 14.03.2023 SB2023031479
SB2023031501
SB2023031502
and 37 more
#VU73674 - Exposure of sensitive information to an unauthorized actor
CVE-2023-28163
CWE-200 Low
No
No
- 14.03.2023 SB2023031479
SB2023031501
SB2023031502
and 11 more
#VU73673 - Out-of-bounds read
CVE-2023-25752
CWE-125 Medium
No
No
- 14.03.2023 SB2023031479
SB2023031501
SB2023031502
and 38 more
#VU73672 - Type conversion
CVE-2023-28162
CWE-704 High
No
No
- 14.03.2023 SB2023031479
SB2023031501
SB2023031502
and 38 more
#VU73671 - User Interface (UI) Misrepresentation of Critical Information (Clickjacking, spoofing)
CVE-2023-28164
CWE-451 Medium
No
No
- 14.03.2023 SB2023031479
SB2023031501
SB2023031502
and 38 more
#VU73670 - Improper Control of Generation of Code ('Code Injection')
CVE-2023-25751
CWE-94 High
No
No
- 14.03.2023 SB2023031479
SB2023031501
SB2023031502
and 39 more
#VU73669 - Insufficient UI Warning of Dangerous Operations
CVE-2023-28159
CWE-357 Medium
No
No
- 14.03.2023 SB2023031479
SB2023031502
SB2023031641
and 2 more
#VU72575 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-48339
CWE-78 High
No
No
- 26.02.2023 SB2022120142
SB2023022605
SB2023030230
and 50 more
#VU72573 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-48337
CWE-78 High
No
No
- 26.02.2023 SB2022120142
SB2023022605
SB2023030230
and 42 more
#VU71977 - Resource exhaustion
CVE-2022-44571
CWE-400 Medium
No
No
- 07.02.2023 SB2023020708
SB2023020711
SB2023030241
and 11 more
#VU71974 - Resource exhaustion
CVE-2022-44570
CWE-400 Medium
No
No
- 07.02.2023 SB2023020708
SB2023020711
SB2023030241
and 11 more
#VU71305 - Improper input validation
CVE-2022-44566
CWE-20 Medium
No
No
- 18.01.2023 SB2023011833
SB2023022358
SB2023022503
and 5 more
#VU71303 - Improper input validation
CVE-2023-22796
CWE-20 Medium
No
No
- 18.01.2023 SB2023011833
SB2023020662
SB2023030334
and 7 more
#VU71137 - Incorrect Regular Expression
CVE-2022-40899
CWE-185 Medium
No
No
- 12.01.2023 SB2023011234
SB2023011239
SB2023011240
and 26 more
#VU70433 - Stack-based buffer overflow
CVE-2022-46340
CWE-121 Low
No
No
- 20.12.2022 SB2022122002
SB2022122003
SB2022122004
and 47 more
#VU69240 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-45063
CWE-78 High
No
No
- 11.11.2022 SB2022111113
SB2022112204
SB2023011810
and 11 more
#VU86 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2015-4000
CWE-300 Medium
Available
No
- 04.07.2016 SB2015071003
SB2015070202
SB2015072201
and 36 more


Showing elements 781 - 800 out of 1656