Known vulnerabilities in python-jinja2 (Red Hat package) - page 2
Vendor:
Red Hat Inc.
Software:
python-jinja2 (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:python-jinja2_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
68
Public exploits:
4
Known exploited (KEV):
1
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
2.10.1-2.el8_2.4
2.10.1-4.el8_6.2
2.11.3-7.el9_4
2.11.3-5.el9_2
2.10.1-5.el8_8
2.10.1-2.el8_4.2
2.11.3-8.el9_5
3.1.6-1.el9ap
2.10.1-2.el8_2.3
3.1.5-1.el8pc
3.1.5-1.el9pc
3.1.4-1.el8ui
2.7.2-5.el7_9
2.10.1-2.el8_4.1
2.11.3-4.el9_2.1
2.11.3-4.el9_0.1
2.10.1-4.el8_6.1
2.10.1-4.el8_8.1
2.11.3-6.el9_4
3.1.5-1.el9ap
2.10.1-6.el8_10
2.11.3-7.el9_5
2.11.3-6.el9
3.1.4-1.el8pc
3.1.4-1.el9pc
2.10.1-5.el8_10
3.1.4-1.el9ap
2.10.1-4.el8
2.11.3-5.el9
3.1.3-1.el8pc
3.1.3-1.el8ui
3.1.3-0.1.el8pc
3.1.3-1.el9ap
3.1.2-1.el8pc
3.1.2-1.0.1.el8ui
2.10.1-3.el8
3.0.3-1.el8pc
3.0.2-1.el8pc
2.7.2-3.el7_4
2.7.2-3.el7_5
2.10-10.el7sat
2.10.1-2.el8_0
2.7.2-3.el7_6
2.7.2-2.el7cp
2.7.2-2.el7sat
2.10-10.el7
2.10-2.el7
2.7.2-2.el7
2.2.1-2.el6_5
2.2.1-1.el6
2.7.2-3.el6
2.2.1-3.el6
2.7.2-2.el6
2.2.1-4.el6
Vulnerabilities (68)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU97594 - Improper Authentication CVE-2024-7923 |
CWE-287 | High | 3.1.4-1.el8pc, 3.1.4-1.el9pc | 19.09.2024 |
SB2024092064 SB2024092065 SB2024092066 and 1 more |
||
| #VU97593 - Improper Authentication CVE-2024-7012 |
CWE-287 | High | 3.1.4-1.el8pc, 3.1.4-1.el9pc | 19.09.2024 |
SB2024092064 SB2024092065 SB2024092066 and 1 more |
||
| #VU96644 - Improper input validation CVE-2024-7246 |
CWE-20 | Medium | 3.1.4-1.el8pc, 3.1.4-1.el9pc, 3.1.4-1.el8ui | 30.08.2024 |
SB2024083031 SB2024083036 SB2024090612 and 11 more |
||
| #VU95445 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2024-42005 |
CWE-89 | High | 3.1.4-1.el8pc, 3.1.4-1.el9pc, 3.1.4-1.el8ui | 07.08.2024 |
SB2024080728 SB2024080771 SB2024080772 and 12 more |
||
| #VU90156 - Security Features CVE-2024-35195 |
CWE-254 | Low | 3.1.4-1.el9ap, 3.1.4-1.el8ui, 3.1.5-1.el8pc, 3.1.5-1.el9pc | 31.05.2024 |
SB2024053174 SB2024053188 SB2024053192 and 117 more |
||
| #VU89677 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-34064 |
CWE-79 | Medium | 2.10.1-5.el8_10, 2.11.3-6.el9, 3.1.4-1.el9ap, 3.1.4-1.el8ui | 20.05.2024 |
SB2024052067 SB2024052081 SB2024052082 and 83 more |
||
| #VU89381 - Uncontrolled Recursion CVE-2024-4340 |
CWE-674 | Medium | 3.1.4-1.el9ap, 3.1.4-1.el8ui | 13.05.2024 |
SB2024051329 SB2024051330 SB2024051352 and 15 more |
||
| #VU89167 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2024-1135 |
CWE-444 | Medium | 3.1.4-1.el9ap, 3.1.4-1.el8ui | 06.05.2024 |
SB2024050631 SB2024050632 SB2024050633 and 40 more |
||
| #VU89159 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2024-30251 |
CWE-835 | Medium | 3.1.4-1.el9ap, 3.1.4-1.el8ui | 06.05.2024 |
SB2024050618 SB2024061929 SB2024072506 and 12 more |
||
| #VU89132 - Improper Handling of Case Sensitivity CVE-2024-32879 |
CWE-178 | Medium | 3.1.4-1.el9ap | 03.05.2024 |
SB2024050319 SB2024050321 SB2024061929 and 3 more |
||
| #VU88853 - Incorrect Regular Expression CVE-2024-3772 |
CWE-185 | Medium | 3.1.4-1.el9ap | 19.04.2024 |
SB2024041926 SB2024041929 SB2024041930 and 8 more |
||
| #VU88828 - Resource exhaustion CVE-2024-3651 |
CWE-400 | Medium | 3.1.4-1.el9ap | 19.04.2024 |
SB2024041905 SB2024041906 SB2024041907 and 112 more |
||
| #VU88804 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2024-27306 |
CWE-79 | Medium | 3.1.4-1.el9ap, 3.1.4-1.el8ui | 18.04.2024 |
SB2024041813 SB2024042444 SB2024042445 and 12 more |
||
| #VU88063 - Memory corruption CVE-2024-28219 |
CWE-119 | Medium | 3.1.4-1.el9ap | 03.04.2024 |
SB2024040318 SB2024040320 SB2024040844 and 28 more |
||
| #VU87583 - Improper input validation CVE-2024-21503 |
CWE-20 | Medium | 3.1.4-1.el9ap | 18.03.2024 |
SB2024031822 SB2024050632 SB2024061929 and 7 more |
||
| #VU87551 - Exposure of sensitive information to an unauthorized actor CVE-2024-28849 |
CWE-200 | Low | 3.1.4-1.el9ap | 15.03.2024 |
SB2024031508 SB2024031517 SB2024040365 and 59 more |
||
| #VU87196 - Error Handling CVE-2024-24783 |
CWE-388 | Medium | 3.1.4-1.el9ap | 07.03.2024 |
SB2024030734 SB2024030750 SB2024030752 and 81 more |
||
| #VU87129 - NULL Pointer Dereference CVE-2024-26130 |
CWE-476 | Medium | 3.1.4-1.el9ap, 3.1.4-1.el8ui | 05.03.2024 |
SB2024030534 SB2024030535 SB2024030546 and 41 more |
||
| #VU85743 - Improper Control of Generation of Code ('Code Injection') CVE-2023-50447 |
CWE-94 | High | 3.1.4-1.el9ap | 24.01.2024 |
SB2024012413 SB2024012417 SB2024012465 and 34 more |
||
| #VU83930 - NULL Pointer Dereference CVE-2023-49083 |
CWE-476 | Medium | 3.1.3-1.el8ui, 3.1.4-1.el9ap | 06.12.2023 |
SB2023120655 SB2023120656 SB2023121440 and 63 more |
Showing elements 21 - 40 out of 68