Redhat Software Collection vulnerabilities

• postgresql, red hat advanced cluster security 4.2, enterprise linux 6 +31 more +33 more Postgresql: role pg_signal_backend can signal certain superuser processes. CVE-2023-5870 Fix available 2.2 LowNovember 10, 2023
• postgresql, red hat advanced cluster security 4.2, enterprise linux 6 +37 more +39 more Postgresql: buffer overrun from integer overflow in array modification CVE-2023-5869 Fix available 8.8 HighNovember 10, 2023
• postgresql, red hat advanced cluster security 4.2, enterprise linux 6 +31 more +33 more Postgresql: memory disclosure in aggregate function calls CVE-2023-5868 Fix available 4.3 MediumNovember 10, 2023
• postgresql, debian linux, red hat advanced cluster security 4.2 +19 more +21 more Postgresql: extension script @substitutions@ within quoting allow sql injection CVE-2023-39417 Fix available 7.5 HighAugust 11, 2023
• postgresql, fedoraproject fedora, redhat enterprise linux +1 more +3 more Row security policies disregard user ID changes after inlining; PostgreSQL could permit incorrect... CVE-2023-2455 Fix available 5.4 MediumMay 11, 2023
• postgresql, fedoraproject fedora, redhat enterprise linux +1 more +3 more schema_element defeats protective search_path changes; It was found that certain database calls... CVE-2023-2454 Fix available 7.2 HighMay 11, 2023
• php, fedora, red hat enterprise linux 6 +5 more +7 more Potential buffer overflow in php_cli_server_startup_workers CVE-2022-4900 Fix available 6.2 MediumMarch 27, 2023
• c-ares, fedoraproject fedora, redhat enterprise linux +1 more +3 more A flaw was found in the c-ares package. The ares_set_sortlist is missing checks about the... CVE-2022-4904 Fix available 8.6 HighFebruary 15, 2023
• haproxy, fedoraproject extra packages for enterprise linux, fedora +6 more +8 more An uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash... CVE-2023-0056 Fix available 6.5 MediumJanuary 18, 2023
• python, fedoraproject fedora, redhat enterprise linux +5 more +7 more A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases,... CVE-2020-10735 Fix available 7.5 HighSeptember 9, 2022
• haproxy, debian linux, redhat enterprise linux +2 more +4 more A flaw was found in the way HAProxy processed HTTP responses containing the "Set-Cookie2" header.... CVE-2022-0711 Fix available EPSS 16.6% 7.5 HighMarch 2, 2022
• python, debian linux, netapp ontap select deploy administration utility +5 more +7 more A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in... CVE-2021-4189 Fix available 5.3 MediumDecember 31, 2021
• ruby-lang cgi, ruby, debian linux +6 more +8 more Cookie Prefix Spoofing in CGI::Cookie.parse CVE-2021-41819 Fix available 7.5 HighDecember 23, 2021
• apache log4j, apache software foundation log4j 1.x, fedoraproject fedora +44 more +46 more Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2 CVE-2021-4104 Public exploitFix available EPSS 80.6% 7.5 HighDecember 14, 2021
• ruby-lang date, ruby, debian linux +6 more +8 more Regular expression denial of service vulnerability (ReDoS) in date CVE-2021-41817 Fix available 7.5 HighNovember 16, 2021
• fedoraproject fedora, postgresql, redhat enterprise linux +3 more +5 more When the server is configured to use trust authentication with a clientcert requirement or to use... CVE-2021-23214 Fix available 8.1 HighNovember 11, 2021
• redis, debian linux, fedoraproject fedora +5 more +7 more Vulnerability in Lua Debugger in Redis CVE-2021-32672 Fix available 5.3 MediumOctober 4, 2021
• apache, apache http server, broadcom brocade fabric operating system firmware +36 more +38 more mod_proxy SSRF CVE-2021-40438 In KEVPublic exploitFix available EPSS 100.0% 9.0 CriticalSeptember 16, 2021
• kernel kvm, linux kernel, fedoraproject fedora +24 more +26 more Important: kernel security, bug fix, and enhancement update CVE-2021-3656 Public exploitFix available 8.8 HighAugust 16, 2021
• postgresql, fedoraproject fedora, redhat enterprise linux +4 more +6 more A flaw was found in postgresql. A purpose-crafted query can read arbitrary bytes of server memory... CVE-2021-3677 Fix available 6.5 MediumAugust 12, 2021
• postgresql, redhat enterprise linux, jboss enterprise application platform +1 more +3 more A flaw was found in postgresql in versions before 13.3, before 12.7, before 11.12, before 10.17... CVE-2021-32027 Fix available 8.8 HighMay 13, 2021
• python, debian linux, fedoraproject fedora +10 more +12 more There's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers or is able to... CVE-2021-3426 Fix available 5.7 MediumApril 5, 2021
• http-proxy-agent project http-proxy-agent, fedoraproject fedora, redhat enterprise linux +1 more +3 more Resource Exhaustion Denial of Service in http-proxy-agent CVE-2019-10196 Fix available 9.8 CriticalMarch 19, 2021
• pygments, debian linux, fedoraproject fedora +5 more +7 more Infinite Loop in Pygments CVE-2021-20270 Fix available 7.5 HighMarch 9, 2021
• postgresql, fedoraproject fedora, redhat enterprise linux +1 more +3 more Incorrect Authorization in PostgreSQL CVE-2021-20229 Fix available 4.3 MediumFebruary 22, 2021
• postgresql, redhat enterprise linux, software collections +2 more Generation of Error Message Containing Sensitive Information in postgresql CVE-2021-3393 Fix available 4.3 MediumFebruary 12, 2021
• lxml, debian linux, fedoraproject fedora +5 more +7 more lxml vulnerable to Cross-site Scripting CVE-2020-27783 Fix available 6.1 MediumNovember 26, 2020
• apache http server, canonical ubuntu linux, debian linux +22 more +24 more Apache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest'... CVE-2020-9490 Fix available EPSS 88.8% 7.5 HighAugust 7, 2020
• postgresql, redhat decision manager, enterprise linux +1 more +3 more A flaw was found in PostgreSQL's "ALTER ... DEPENDS ON EXTENSION", where sub... CVE-2020-1720 Fix available 3.1 LowFebruary 13, 2020
• nodejs node, node.js, debian linux +8 more +10 more Improper Certificate Validation in Node.js 10, 12, and 13 causes the process to abort when... CVE-2019-15604 Fix available EPSS 20.0% 7.5 HighFebruary 7, 2020
• nodejs node, node.js, debian linux +11 more +13 more HTTP request smuggling in Node.js 10, 12, and 13 causes malicious payload delivery when transfer... CVE-2019-15605 Public exploitFix available EPSS 57.1% 9.8 CriticalFebruary 7, 2020
• apache xml-rpc, canonical ubuntu linux, debian linux +2 more +4 more Insecure Deserialization in Apache XML-RPC CVE-2019-17570 Public exploitFix available EPSS 49.3% 9.8 CriticalJanuary 23, 2020
• php, canonical ubuntu linux, debian linux +21 more +23 more Underflow in PHP-FPM can lead to RCE CVE-2019-11043 In KEVPublic exploitFix available EPSS 99.8% 8.7 HighOctober 24, 2019
• python, canonical ubuntu linux, debian linux +10 more +12 more An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7... CVE-2019-16056 Fix available 7.5 HighSeptember 6, 2019
• apache http server, canonical ubuntu linux, debian linux +7 more +9 more In Apache HTTP Server 2.4.0-2.4.39, a limited cross-site scripting issue was reported affecting... CVE-2019-10092 Public exploitFix available EPSS 81.5% 6.1 MediumAugust 14, 2019
• apache traffic server, apple swiftnio, canonical ubuntu linux +15 more +17 more Some HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of service CVE-2019-9518 Fix available EPSS 25.4% 7.5 HighAugust 13, 2019
• apache http server, traffic server, apple swiftnio +20 more +22 more Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service CVE-2019-9517 Fix available EPSS 27.9% 7.5 HighAugust 13, 2019
• apache traffic server, apple swiftnio, canonical ubuntu linux +16 more +18 more Some HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service CVE-2019-9516 Fix available EPSS 57.5% 7.5 HighAugust 13, 2019
• apache traffic server, apple swiftnio, canonical ubuntu linux +19 more +21 more Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service CVE-2019-9515 Fix available EPSS 87.3% 7.5 HighAugust 13, 2019
• apache traffic server, apple swiftnio, canonical ubuntu linux +25 more +27 more Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service CVE-2019-9514 Fix available EPSS 82.8% 7.5 HighAugust 13, 2019
• apache traffic server, apple swiftnio, canonical ubuntu linux +17 more +19 more Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service CVE-2019-9513 Fix available EPSS 81.6% 7.5 HighAugust 13, 2019
• apache traffic server, apple swiftnio, canonical ubuntu linux +17 more +19 more Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service CVE-2019-9511 Public exploitFix available EPSS 59.5% 7.5 HighAugust 13, 2019
• php, apple mac os x, canonical ubuntu linux +4 more +6 more heap-buffer-overflow on exif_process_user_comment in EXIF extension CVE-2019-11042 Fix available 4.8 MediumAugust 9, 2019
• php, apple mac os x, canonical ubuntu linux +4 more +6 more heap-buffer-overflow on exif_scan_thumbnail in EXIF extension CVE-2019-11041 Fix available 4.8 MediumAugust 9, 2019
• oracle mysql, oracle corporation mysql server, redhat enterprise linux +4 more +6 more Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported... CVE-2019-2879 Fix available 4.9 MediumJuly 23, 2019
• oracle mysql, oracle corporation mysql server, redhat enterprise linux +4 more +6 more Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer).... CVE-2019-2834 Fix available 6.5 MediumJuly 23, 2019
• oracle mysql, oracle corporation mysql server, redhat enterprise linux +4 more +6 more Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer).... CVE-2019-2830 Fix available 4.9 MediumJuly 23, 2019
• oracle mysql, oracle corporation mysql server, redhat enterprise linux +4 more +6 more Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security:... CVE-2019-2826 Fix available 4.9 MediumJuly 23, 2019
• oracle mysql, oracle corporation mysql server, redhat enterprise linux +4 more +6 more Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer).... CVE-2019-2815 Fix available 4.9 MediumJuly 23, 2019
• oracle mysql, oracle corporation mysql server, redhat enterprise linux +4 more +6 more Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported... CVE-2019-2814 Fix available 2.2 LowJuly 23, 2019
• Show olderLoading…