Known vulnerabilities in jbcs-httpd24-brotli (Red Hat package) - page 2
Vendor:
Red Hat Inc.
Software:
jbcs-httpd24-brotli (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:jbcs-httpd24-brotli_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
37
Public exploits:
2
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
Vulnerabilities (37)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU53773 - NULL Pointer Dereference CVE-2021-31618 |
CWE-476 | Medium | 1.0.6-40.el8jbcs | 03.06.2021 |
SB2021060320 SB2021060321 SB2021060713 and 12 more |
||
| #VU53589 - Use After Free CVE-2021-22901 |
CWE-416 | High | 1.0.6-40.el8jbcs | 26.05.2021 |
SB2021052620 SB2021052711 SB2021052719 and 18 more |
||
| #VU51822 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle') CVE-2021-22890 |
CWE-300 | Medium | 1.0.6-40.el8jbcs | 31.03.2021 |
SB2021033111 SB2021040104 SB2021040117 and 15 more |
||
| #VU51821 - Exposure of sensitive information to an unauthorized actor CVE-2021-22876 |
CWE-200 | Medium | 1.0.6-40.el8jbcs | 31.03.2021 |
SB2021033111 SB2021040104 SB2021040117 and 31 more |
||
| #VU48895 - Improper Check for Certificate Revocation CVE-2020-8286 |
CWE-299 | Medium | 1.0.6-40.el8jbcs | 09.12.2020 |
SB2020120902 SB2020120915 SB2020120929 and 30 more |
||
| #VU48894 - Uncontrolled Recursion CVE-2020-8285 |
CWE-674 | Low | 1.0.6-40.el8jbcs | 09.12.2020 |
SB2020120902 SB2020120915 SB2020120928 and 37 more |
||
| #VU48893 - Exposure of sensitive information to an unauthorized actor CVE-2020-8284 |
CWE-200 | Medium | 1.0.6-40.el8jbcs | 09.12.2020 |
SB2020120902 SB2020120915 SB2020120927 and 31 more |
||
| #VU48896 - NULL Pointer Dereference CVE-2020-1971 |
CWE-476 | Medium | 1.0.6-40.jbcs.el7 | 08.12.2020 |
SB2020120852 SB2020120903 SB2020120905 and 91 more |
||
| #VU29292 - Exposure of sensitive information to an unauthorized actor CVE-2020-8169 |
CWE-200 | Medium | 1.0.6-40.el8jbcs | 25.06.2020 |
SB2020062513 SB2020062514 SB2020063017 and 14 more |
||
| #VU21045 - Cryptographic Issues CVE-2019-1563 |
CWE-310 | Low | 1.0.6-21.jbcs.el6, 1.0.6-21.jbcs.el7 | 11.09.2019 |
SB2019091112 SB2019091202 SB2019092407 and 27 more |
||
| #VU21044 - Protection Mechanism Failure CVE-2019-1549 |
CWE-693 | Low | 1.0.6-21.jbcs.el6, 1.0.6-21.jbcs.el7 | 11.09.2019 |
SB2019091112 SB2019100304 SB2020040729 and 9 more |
||
| #VU21043 - Cryptographic Issues CVE-2019-1547 |
CWE-310 | Low | 1.0.6-21.jbcs.el6, 1.0.6-21.jbcs.el7 | 11.09.2019 |
SB2019091112 SB2019091202 SB2019092407 and 39 more |
||
| #VU20386 - Use After Free CVE-2019-10082 |
CWE-416 | Medium | 1.0.6-21.jbcs.el6, 1.0.6-21.jbcs.el7 | 23.08.2019 |
SB2019082303 SB2019082610 SB2019090202 and 17 more |
||
| #VU20385 - NULL Pointer Dereference CVE-2019-10097 |
CWE-476 | Low | 1.0.6-21.jbcs.el6, 1.0.6-21.jbcs.el7 | 23.08.2019 |
SB2019082303 SB2019082610 SB2019090202 and 14 more |
||
| #VU20384 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2019-10092 |
CWE-79 | Low | 1.0.6-21.jbcs.el6, 1.0.6-21.jbcs.el7 | 23.08.2019 |
SB2019082303 SB2019082610 SB2019090202 and 17 more |
||
| #VU20374 - Improper input validation CVE-2019-10098 |
CWE-20 | Medium | 1.0.6-21.jbcs.el6, 1.0.6-21.jbcs.el7 | 23.08.2019 |
SB2019082303 SB2019082610 SB2019090202 and 19 more |
||
| #VU20373 - Out-of-bounds write CVE-2019-10081 |
CWE-787 | Medium | 1.0.6-21.jbcs.el6, 1.0.6-21.jbcs.el7 | 23.08.2019 |
SB2019082303 SB2019082610 SB2019090202 and 11 more |
Showing elements 21 - 40 out of 37