Known vulnerabilities in venv-salt-minion - page 3

Vendor: SUSE
Software: venv-salt-minion
Software CPE: cpe:2.3:o:suse:venv-salt-minion:*:*:*:*:*:suse_linux:*:*
Website: https://www.suse.com/
Total vulnerabilities: 54
Public exploits: 4
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting venv-salt-minion venv-salt-minion is affected by 54 known vulnerabilities: 5 high, 25 medium, 24 low Critical High Medium Low

Vulnerabilities (54)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU86611 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2024-22231		 CWE-22 Low
No
No
 3006.0-1.36.3, 3006.0-2.12.3, 3006.0-2.43.3, 3006.0-2.50.4, 3006.0-2.52.3, 3006.0-3.52.3, 3006.0-150000.3.54.3 20.02.2024 SB2024022022
SB2024022023
SB2024022024
and 13 more
#VU82944 - UNIX Symbolic Link (Symlink) Following
CVE-2023-34049		 CWE-61 Low
No
No
 3006.0-1.30.3, 3006.0-2.6.3, 3006.0-2.44.4, 3006.0-2.46.4, 3006.0-3.46.2, 3006.0-150000.3.48.2 09.11.2023 SB2023110931
SB2023110932
SB2023110933
and 17 more
#VU82817 - Incorrect Permission Assignment for Critical Resource
CVE-2022-22941		 CWE-732 Medium
No
No
 3004-2.9.1, 3004-2.9.2, 3004-2.11.2, 3004-3.9.1, 3004-159000.3.9.1 07.11.2023 SB2022032942
SB2023110714
SB2022033035
and 21 more
#VU82815 - Authentication Bypass by Capture-replay
CVE-2022-22936		 CWE-294 Medium
No
No
 3004-2.9.1, 3004-2.9.2, 3004-2.11.2, 3004-3.9.1, 3004-159000.3.9.1 07.11.2023 SB2022032942
SB2023110714
SB2022033035
and 21 more
#VU82801 - Insufficient Verification of Data Authenticity
CVE-2022-22935		 CWE-345 Medium
No
No
 3004-2.9.1, 3004-2.9.2, 3004-2.11.2, 3004-3.9.1, 3004-159000.3.9.1 07.11.2023 SB2022032942
SB2023110714
SB2022033035
and 20 more
#VU82800 - Cryptographic Issues
CVE-2022-22934		 CWE-310 Low
No
No
 3004-2.9.1, 3004-2.9.2, 3004-2.11.2, 3004-3.9.1, 3004-159000.3.9.1 07.11.2023 SB2022032942
SB2023110714
SB2022033035
and 21 more
#VU80472 - Permissions, Privileges, and Access Controls
CVE-2023-20898		 CWE-264 Low
No
No
 3006.0-1.24.1, 3006.0-2.38.1, 3006.0-2.40.1, 3006.0-3.40.1, 3006.0-150000.3.42.1 05.09.2023 SB2023090559
SB2023090563
SB2023090601
and 13 more
#VU80471 - Improper input validation
CVE-2023-20897		 CWE-20 Medium
No
No
 3006.0-1.24.1, 3006.0-2.38.1, 3006.0-2.40.1, 3006.0-3.40.1, 3006.0-150000.3.42.1 05.09.2023 SB2023090559
SB2023090563
SB2023090601
and 14 more
#VU76397 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2023-28370		 CWE-601 Medium
No
No
 3006.0-1.19.2, 3006.0-2.33.1, 3006.0-3.33.2, 3006.0-150000.3.35.1 22.05.2023 SB2023052204
SB2023061333
SB2023062257
and 28 more
#VU64660 - Improper Authentication
CVE-2022-22967		 CWE-287 Low
No
No
 3004-2.11.2, 3004-3.11.1, 3004-150000.3.11.1 24.06.2022 SB2022062428
SB2022062430
SB2022062441
and 13 more
#VU61662 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2022-24302		 CWE-362 Low
No
No
 3004-3.9.1 28.03.2022 SB2022032832
SB2022032837
SB2022033014
and 20 more
#VU61391 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-0778		 CWE-835 Medium
Available
No
 3004-3.9.1 15.03.2022 SB2022031520
SB2022031522
SB2022031611
and 238 more
#VU51777 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-28957		 CWE-79 Low
No
No
 3004-3.9.1 30.03.2021 SB2021033001
SB2021033005
SB2021040175
and 20 more
#VU16583 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-19787		 CWE-79 Low
No
No
 3004-3.9.1 17.12.2018 SB2018121812
SB2022031730
SB2024051024
and 4 more


Showing elements 41 - 60 out of 54