Known vulnerabilities in python-rsa (Red Hat package) - page 2

Vendor: Red Hat Inc.
Software: python-rsa (Red Hat package)
Software CPE: cpe:2.3:o:red_hat:python-rsa_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 36
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting python-rsa (Red Hat package) python-rsa (Red Hat package) is affected by 36 known vulnerabilities: 17 medium, 19 low Critical High Medium Low

Vulnerabilities (36)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU50020 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2021-21615		 CWE-367 Medium
No
No
 4.7-1.el8 26.01.2021 SB2021012623
SB2021021723
SB2021022601
and 1 more
#VU49525 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21611		 CWE-79 Low
No
No
 4.7-1.el8 14.01.2021 SB2021011418
SB2021011453
SB2021012106
and 2 more
#VU49524 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21610		 CWE-79 Low
No
No
 4.7-1.el8 14.01.2021 SB2021011418
SB2021011452
SB2021012106
and 2 more
#VU49523 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21608		 CWE-79 Low
No
No
 4.7-1.el8 14.01.2021 SB2021011418
SB2021011450
SB2021012106
and 2 more
#VU49522 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21603		 CWE-79 Low
No
No
 4.7-1.el8 13.01.2021 SB2021011418
SB2021011445
SB2021012106
and 2 more
#VU49526 - XML Injection
CVE-2021-21604		 CWE-91 Medium
No
No
 4.7-1.el8 13.01.2021 SB2021011418
SB2021011446
SB2021012106
and 2 more
#VU49527 - Exposure of sensitive information to an unauthorized actor
CVE-2021-21602		 CWE-200 Medium
No
No
 4.7-1.el8 13.01.2021 SB2021011418
SB2021011444
SB2021012106
and 2 more
#VU49528 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-21605		 CWE-22 Medium
No
No
 4.7-1.el8 13.01.2021 SB2021011418
SB2021011447
SB2021012106
and 2 more
#VU49530 - Memory corruption
CVE-2021-21607		 CWE-119 Medium
No
No
 4.7-1.el8 13.01.2021 SB2021011418
SB2021011449
SB2021012106
and 2 more
#VU49531 - Permissions, Privileges, and Access Controls
CVE-2021-21609		 CWE-264 Low
No
No
 4.7-1.el8 13.01.2021 SB2021011418
SB2021011451
SB2021012106
and 2 more
#VU30132 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-2226		 CWE-79 Low
No
No
 4.5-1.el7 16.07.2020 SB20200716114
SB2020081913
SB2020090880
and 1 more
#VU30131 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-2225		 CWE-79 Low
No
No
 4.5-1.el7 16.07.2020 SB20200716113
SB2020081913
SB2020090880
and 1 more
#VU30130 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2020-2224		 CWE-79 Low
No
No
 4.5-1.el7 16.07.2020 SB20200716113
SB2020081913
SB2020090880
and 1 more
#VU28793 - Use of a Broken or Risky Cryptographic Algorithm
CVE-2020-13757		 CWE-327 Medium
No
No
 4.5-1.el7 08.06.2020 SB2020060820
SB2020081913
SB2020090110
and 11 more
#VU27924 - Incorrect Default Permissions
CVE-2020-1945		 CWE-276 Low
No
No
 4.7-1.el8 15.05.2020 SB2020051501
SB2020052114
SB2020060205
and 48 more
#VU47428 - Permissions, Privileges, and Access Controls
CVE-2020-11979		 CWE-264 Low
No
No
 4.7-1.el8 14.05.2020 SB2020100804
SB2020100815
SB2020111614
and 51 more


Showing elements 21 - 40 out of 36