Software Collections (Redhat) - vulnerabilities (CVEs)

137 CVEs, 0 in the last 30 days, 15 known versions, newest CVE from 2023-12-10. Vendor: Redhat.

CVEs of Software Collections

CVE-2023-5869 - CVSS 8.8 (high), 2023-12-10: A flaw was found in PostgreSQL that allows authenticated database users to execute arbitrary code through missing overflow checks during SQL array value…
CVE-2023-5868 - CVSS 4.3 (medium), 2023-12-10: A memory disclosure vulnerability was found in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function…
CVE-2023-5870 - CVSS 4.4 (medium), 2023-12-10: A flaw was found in PostgreSQL involving the pg_cancel_backend role that signals background workers, including the logical replication launcher, autovacuum…
CVE-2022-4900 - CVSS 6.2 (medium), 2023-11-02: A vulnerability was found in PHP where setting the environment variable PHP_CLI_SERVER_WORKERS to a large value leads to a heap buffer overflow.
CVE-2023-39417 - CVSS 8.8 (high), 2023-08-11: IN THE EXTENSION SCRIPT, a SQL Injection vulnerability was found in PostgreSQL if it uses @extowner@, @extschema@, or @extschema:...@ inside a quoting…
CVE-2023-2455 - CVSS 5.4 (medium), 2023-06-09: Row security policies disregard user ID changes after inlining; PostgreSQL could permit incorrect policies to be applied in certain cases where role-specific…
CVE-2023-2454 - CVSS 7.2 (high), 2023-06-09: schema_element defeats protective search_path changes; It was found that certain database calls in PostgreSQL could permit an authed attacker with elevated…
CVE-2023-0056 - CVSS 6.5 (medium), 2023-03-23: An uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash the service. This issue could allow an authenticated remote…
CVE-2022-4904 - CVSS 8.6 (high), 2023-03-06: A flaw was found in the c-ares package. The ares_set_sortlist is missing checks about the validity of the input string, which allows a possible arbitrary…
CVE-2020-10735 - CVSS 7.5 (high), 2022-09-09: A flaw was found in python. In algorithms with quadratic time complexity using non-binary bases, when using int("text"), a system could take 50ms to parse an…
CVE-2021-4189 - CVSS 5.3 (medium), 2022-08-24: A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in PASV (passive) mode. The issue is how the FTP client trusts the…
CVE-2021-3656 - CVSS 8.8 (high), 2022-03-04: A flaw was found in the KVM's AMD code for supporting SVM nested virtualization. The flaw occurs when processing the VMCB (virtual machine control block)…
CVE-2021-23214 - CVSS 8.1 (high), 2022-03-04: When the server is configured to use trust authentication with a clientcert requirement or to use cert authentication, a man-in-the-middle attacker can inject…
CVE-2021-3677 - CVSS 6.5 (medium), 2022-03-02: A flaw was found in postgresql. A purpose-crafted query can read arbitrary bytes of server memory. In the default configuration, any authenticated database…
CVE-2022-0711 - CVSS 7.5 (high), 2022-03-02: A flaw was found in the way HAProxy processed HTTP responses containing the "Set-Cookie2" header. This flaw could allow an attacker to send crafted HTTP…
CVE-2021-41819 - CVSS 7.5 (high), 2022-01-01: CGI::Cookie.parse in Ruby through 2.6.8 mishandles security prefixes in cookie names. This also affects the CGI gem through 0.3.0 for Ruby.
CVE-2021-41817 - CVSS 7.5 (high), 2022-01-01: Date.parse in the date gem through 3.2.0 for Ruby allows ReDoS (regular expression Denial of Service) via a long string. The fixed versions are 3.2.1, 3.1.2,…
CVE-2021-4104 - CVSS 7.5 (high), 2021-12-14: JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration. The attacker can…
CVE-2021-32672 - CVSS 5.3 (medium), 2021-10-04: Redis is an open source, in-memory database that persists on disk. When using the Redis Lua Debugger, users can send malformed requests that cause the…
CVE-2021-40438 - CVSS 9 (critical), 2021-09-16: A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server…
CVE-2021-32027 - CVSS 8.8 (high), 2021-06-01: A flaw was found in postgresql in versions before 13.3, before 12.7, before 11.12, before 10.17 and before 9.6.22. While modifying certain SQL array values,…
CVE-2021-3426 - CVSS 5.7 (medium), 2021-05-20: There's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers or is able to convince another local or adjacent user to start a pydoc server…
CVE-2021-3393 - CVSS 4.3 (medium), 2021-04-01: An information leak was discovered in postgresql in versions before 13.2, before 12.6 and before 11.11. A user having UPDATE permission but not SELECT…
CVE-2021-20270 - CVSS 7.5 (high), 2021-03-23: An infinite loop in SMLLexer in Pygments versions 1.5 to 2.7.3 may lead to denial of service when performing syntax highlighting of a Standard ML (SML) source…
CVE-2019-10196 - CVSS 9.8 (critical), 2021-03-19: A flaw was found in http-proxy-agent, prior to version 2.1.0. It was discovered http-proxy-agent passes an auth option to the Buffer constructor without…
CVE-2021-20229 - CVSS 4.3 (medium), 2021-02-23: A flaw was found in PostgreSQL in versions before 13.2. This flaw allows a user with SELECT privilege on one column to craft a special query that returns all…
CVE-2020-27783 - CVSS 6.1 (medium), 2020-12-03: A XSS vulnerability was discovered in python-lxml's clean module. The module's parser didn't properly imitate browsers, which caused different behaviors…
CVE-2020-9490 - CVSS 7.5 (high), 2020-08-07: Apache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest' header in a HTTP/2 request would result in a crash when the…
CVE-2020-1720 - CVSS 6.5 (medium), 2020-03-17: A flaw was found in PostgreSQL's "ALTER ... DEPENDS ON EXTENSION", where sub-commands did not perform authorization checks. An authenticated attacker could…
CVE-2014-4650 - CVSS 9.8 (critical), 2020-02-20: The CGIHTTPServer module in Python 2.7.5 and 3.3.4 does not properly handle URLs in which URL encoding is used for path separators, which allows remote…
CVE-2019-15605 - CVSS 9.8 (critical), 2020-02-07: HTTP request smuggling in Node.js 10, 12, and 13 causes malicious payload delivery when transfer-encoding is malformed
CVE-2019-15604 - CVSS 7.5 (high), 2020-02-07: Improper Certificate Validation in Node.js 10, 12, and 13 causes the process to abort when sending a crafted X.509 certificate
CVE-2019-17570 - CVSS 9.8 (critical), 2020-01-23: An untrusted deserialization was found in the org.apache.xmlrpc.parser.XmlRpcResponseParser:addResult method of Apache XML-RPC (aka ws-xmlrpc) library. A…
CVE-2013-5123 - CVSS 5.9 (medium), 2019-11-05: The mirroring support (-M, --use-mirrors) in Python Pip before 1.5 uses insecure DNS querying and authenticity checks which allows attackers to perform…
CVE-2019-11043 - CVSS 9.8 (critical), 2019-10-28: In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to…
CVE-2019-16056 - CVSS 7.5 (high), 2019-09-06: An issue was discovered in Python through 2.7.16, 3.x through 3.5.7, 3.6.x through 3.6.9, and 3.7.x through 3.7.4. The email module wrongly parses email…
CVE-2019-9518 - CVSS 7.5 (high), 2019-08-13: Some HTTP/2 implementations are vulnerable to a flood of empty frames, potentially leading to a denial of service. The attacker sends a stream of frames with…
CVE-2019-9511 - CVSS 7.5 (high), 2019-08-13: Some HTTP/2 implementations are vulnerable to window size manipulation and stream prioritization manipulation, potentially leading to a denial of service. The…
CVE-2019-9515 - CVSS 7.5 (high), 2019-08-13: Some HTTP/2 implementations are vulnerable to a settings flood, potentially leading to a denial of service. The attacker sends a stream of SETTINGS frames to…
CVE-2019-9514 - CVSS 7.5 (high), 2019-08-13: Some HTTP/2 implementations are vulnerable to a reset flood, potentially leading to a denial of service. The attacker opens a number of streams and sends an…
CVE-2019-9517 - CVSS 7.5 (high), 2019-08-13: Some HTTP/2 implementations are vulnerable to unconstrained interal data buffering, potentially leading to a denial of service. The attacker opens the HTTP/2…
CVE-2019-9513 - CVSS 7.5 (high), 2019-08-13: Some HTTP/2 implementations are vulnerable to resource loops, potentially leading to a denial of service. The attacker creates multiple request streams and…
CVE-2019-9516 - CVSS 7.5 (high), 2019-08-13: Some HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service. The attacker sends a stream of headers with a…
CVE-2019-11042 - CVSS 7.1 (high), 2019-08-09: When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.31, 7.2.x below 7.2.21…
CVE-2019-11041 - CVSS 7.1 (high), 2019-08-09: When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.31, 7.2.x below 7.2.21…
CVE-2019-2879 - CVSS 4.9 (medium), 2019-07-23: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 8.0.16 and prior. Easily…
CVE-2019-2834 - CVSS 6.5 (medium), 2019-07-23: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 8.0.16 and prior.…
CVE-2019-2830 - CVSS 4.9 (medium), 2019-07-23: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 8.0.16 and prior.…
CVE-2019-2812 - CVSS 6.5 (medium), 2019-07-23: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 8.0.16 and prior.…
CVE-2019-2819 - CVSS 5.5 (medium), 2019-07-23: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Audit). Supported versions that are affected are 5.6.44 and…
CVE-2019-2815 - CVSS 4.9 (medium), 2019-07-23: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 8.0.16 and prior.…
CVE-2019-2814 - CVSS 2.2 (low), 2019-07-23: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 8.0.16 and prior. Difficult to…
CVE-2019-2826 - CVSS 4.9 (medium), 2019-07-23: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Roles). Supported versions that are affected are 8.0.16 and…
CVE-2019-2797 - CVSS 4.2 (medium), 2019-07-23: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.7.26 and prior and…
CVE-2019-2801 - CVSS 4.9 (medium), 2019-07-23: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: FTS). Supported versions that are affected are 8.0.16 and prior. Easily…
CVE-2019-2808 - CVSS 4.9 (medium), 2019-07-23: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 8.0.16 and prior.…
CVE-2019-2796 - CVSS 4.9 (medium), 2019-07-23: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 8.0.16 and prior.…
CVE-2019-2800 - CVSS 7.1 (high), 2019-07-23: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 8.0.16 and prior.…
CVE-2019-2803 - CVSS 4.9 (medium), 2019-07-23: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 8.0.16 and prior.…
CVE-2019-2811 - CVSS 4.9 (medium), 2019-07-23: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 8.0.16 and…
CVE-2019-2795 - CVSS 6.5 (medium), 2019-07-23: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Charsets). Supported versions that are affected are 8.0.16 and prior.…
CVE-2019-2798 - CVSS 4.9 (medium), 2019-07-23: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 8.0.15 and prior. Easily…
CVE-2019-2802 - CVSS 4.9 (medium), 2019-07-23: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 8.0.16 and prior.…
CVE-2019-2810 - CVSS 4.9 (medium), 2019-07-23: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 8.0.16 and prior.…
CVE-2019-2785 - CVSS 4.9 (medium), 2019-07-23: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 8.0.16 and prior. Easily…
CVE-2019-2784 - CVSS 4.9 (medium), 2019-07-23: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML). Supported versions that are affected are 8.0.16 and prior. Easily…
CVE-2019-2780 - CVSS 4.9 (medium), 2019-07-23: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Components / Services). Supported versions that are affected are 8.0.16 and…
CVE-2019-2789 - CVSS 2.7 (low), 2019-07-23: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 8.0.16 and…
CVE-2019-2778 - CVSS 5.4 (medium), 2019-07-23: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges). Supported versions that are affected are 5.7.26 and…
CVE-2019-2774 - CVSS 4.9 (medium), 2019-07-23: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.26 and prior and…
CVE-2019-2755 - CVSS 4.9 (medium), 2019-07-23: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 5.7.25 and prior and…
CVE-2019-2752 - CVSS 4.9 (medium), 2019-07-23: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Options). Supported versions that are affected are 8.0.16 and prior. Easily…
CVE-2019-2757 - CVSS 4.9 (medium), 2019-07-23: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 5.7.26 and prior and…
CVE-2019-2738 - CVSS 3.1 (low), 2019-07-23: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Compiling). Supported versions that are affected are 5.6.44 and prior,…
CVE-2019-10192 - CVSS 7.2 (high), 2019-07-11: A heap-buffer overflow vulnerability was found in the Redis hyperloglog data structure versions 3.x before 3.2.13, 4.x before 4.0.14 and 5.x before 5.0.4. By…
CVE-2019-11038 - CVSS 5.3 (medium), 2019-06-19: When using the gdImageCreateFromXbm() function in the GD Graphics Library (aka LibGD) 2.2.5, as used in the PHP GD extension in PHP versions 7.1.x below…
CVE-2019-11040 - CVSS 9.1 (critical), 2019-06-19: When PHP EXIF extension is parsing EXIF information from an image, e.g. via exif_read_data() function, in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19…
CVE-2019-11039 - CVSS 9.1 (critical), 2019-06-19: Function iconv_mime_decode_headers() in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19 and 7.3.x below 7.3.6 may perform out-of-buffer read due to…
CVE-2019-11036 - CVSS 9.1 (critical), 2019-05-03: When processing certain files, PHP EXIF extension in versions 7.1.x below 7.1.29, 7.2.x below 7.2.18 and 7.3.x below 7.3.5 can be caused to read past…
CVE-2019-2695 - CVSS 6.5 (medium), 2019-04-23: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 8.0.15 and prior.…
CVE-2019-2694 - CVSS 6.5 (medium), 2019-04-23: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 8.0.15 and prior.…
CVE-2019-2685 - CVSS 4.9 (medium), 2019-04-23: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 8.0.15 and prior.…
CVE-2019-2688 - CVSS 4.9 (medium), 2019-04-23: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 8.0.15 and prior.…
CVE-2019-2693 - CVSS 6.5 (medium), 2019-04-23: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 8.0.15 and prior.…
CVE-2019-2683 - CVSS 4.9 (medium), 2019-04-23: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Options). Supported versions that are affected are 5.6.43 and prior, 5.7.25…
CVE-2019-2687 - CVSS 4.9 (medium), 2019-04-23: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 8.0.15 and prior.…
CVE-2019-2691 - CVSS 4.9 (medium), 2019-04-23: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Roles). Supported versions that are affected are 8.0.15 and…
CVE-2019-2681 - CVSS 4.9 (medium), 2019-04-23: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 8.0.15 and prior.…
CVE-2019-2686 - CVSS 4.9 (medium), 2019-04-23: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 8.0.15 and prior.…
CVE-2019-2689 - CVSS 4.9 (medium), 2019-04-23: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 8.0.15 and prior.…
CVE-2019-2644 - CVSS 4.9 (medium), 2019-04-23: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 8.0.15 and prior. Easily…
CVE-2019-2634 - CVSS 5.1 (medium), 2019-04-23: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 8.0.15 and prior.…
CVE-2019-2625 - CVSS 4.9 (medium), 2019-04-23: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer). Supported versions that are affected are 8.0.15 and prior.…
CVE-2019-2631 - CVSS 4.9 (medium), 2019-04-23: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Information Schema). Supported versions that are affected are 8.0.15 and…
CVE-2019-2636 - CVSS 4.4 (medium), 2019-04-23: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Group Replication Plugin). Supported versions that are affected are 8.0.15…
CVE-2019-2624 - CVSS 4.9 (medium), 2019-04-23: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB). Supported versions that are affected are 8.0.15 and prior. Easily…
CVE-2019-2630 - CVSS 4.4 (medium), 2019-04-23: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 8.0.15 and prior.…
CVE-2019-2635 - CVSS 4.9 (medium), 2019-04-23: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 8.0.15 and prior.…
CVE-2019-2623 - CVSS 5.3 (medium), 2019-04-23: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Options). Supported versions that are affected are 8.0.15 and prior.…
CVE-2019-2626 - CVSS 4.9 (medium), 2019-04-23: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 8.0.15 and prior. Easily…