Known vulnerabilities in receptor (Red Hat package) - page 2
Vendor:
Red Hat Inc.
Software:
receptor (Red Hat package)
Software CPE:
cpe:2.3:o:red_hat:receptor_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website:
https://www.redhat.com/en
Total vulnerabilities:
83
Public exploits:
6
Known exploited (KEV):
2
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
1.6.8-1.el8ap
1.6.8-1.el9ap
1.6.8-1.el10ap
1.6.7-1.el9ap
1.6.7-1.el10ap
1.6.6-1.el9ap
1.6.6-1.el10ap
1.6.5-1.el8ap
1.6.5-1.el9ap
1.6.4-2.el8ap
1.6.4-2.el9ap
1.6.4-3.el10ap
1.6.4-1.el9ap
1.6.4-2.el10ap
1.6.3-4.el8ap
1.6.3-4.el9ap
1.6.3-1.el8ap
1.6.3-1.el9ap
1.6.3-2.el9ap
1.6.3-2.el10ap
1.6.2-2.el10ap
1.6.2-2.el9ap
1.6.2-1.el8ap
1.6.2-1.el9ap
1.6.0-2.1.el8ap
1.6.0-2.1.el9ap
1.5.7-2.el8ap
1.5.7-2.el9ap
1.5.7-1.el8ap
1.5.7-1.el9ap
1.5.5-2.el8ap
1.5.5-2.el9ap
1.5.3-2.el8ap
1.5.3-2.el9ap
1.5.1-2.el8ap
1.5.1-2.el9ap
1.5.1-1.el8ap
1.5.1-1.el9ap
1.4.9-2.el8ap
1.4.9-2.el9ap
1.4.8-1.1.el8ap
1.4.8-1.1.el9ap
1.4.8-1.el8ap
1.4.8-1.el9ap
1.4.5-1.el8ap
1.4.5-1.el9ap
1.4.4-1.el8ap
1.4.4-1.el9ap
1.4.3-1.el8ap
1.4.3-1.el9ap
1.4.2-1.el8ap
1.4.2-1.el9ap
1.4.1-1.el8ap
1.4.1-1.el9ap
1.0.0-1.el8ap
0.6.4-2.el7ar
0.6.3-1.el7ar
0.6.1-1.el7ar
Vulnerabilities (83)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU120990 - Improper Handling of Highly Compressed Data (Data Amplification) CVE-2025-69223 |
CWE-409 | Medium | 1.6.3-1.el8ap, 1.6.3-1.el9ap, 1.6.3-2.el9ap, 1.6.3-2.el10ap, 1.6.3-4.el8ap, 1.6.3-4.el9ap | 06.01.2026 |
SB2026010643 SB2026012661 SB2026012855 and 15 more |
||
| #VU119231 - Resource exhaustion CVE-2025-66471 |
CWE-400 | Medium | 1.6.3-1.el8ap, 1.6.3-1.el9ap, 1.6.3-2.el9ap, 1.6.3-2.el10ap | 05.12.2025 |
SB2025120581 SB2025121208 SB2026011313 and 89 more |
||
| #VU119043 - Resource Management Errors CVE-2025-64460 |
CWE-399 | Medium | 1.6.3-1.el8ap, 1.6.3-1.el9ap, 1.6.3-2.el9ap, 1.6.3-2.el10ap | 02.12.2025 |
SB2025120234 SB2025120237 SB2025120561 and 13 more |
||
| #VU118710 - Improper input validation CVE-2025-9909 |
CWE-20 | Low | 1.6.2-1.el8ap, 1.6.2-1.el9ap | 24.11.2025 |
SB2025112442 SB20251210209 |
||
| #VU118131 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') CVE-2025-64459 |
CWE-89 | Medium | 1.6.2-1.el8ap, 1.6.2-1.el9ap, 1.6.2-2.el10ap | 05.11.2025 |
SB2025110551 SB2025110552 SB2025111466 and 14 more |
||
| #VU117332 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2025-59343 |
CWE-22 | High | 1.6.0-2.1.el8ap, 1.6.0-2.1.el9ap | 17.10.2025 |
SB2025101702 SB2025101703 SB2025101704 and 22 more |
||
| #VU116913 - Reachable Assertion CVE-2025-59530 |
CWE-617 | Medium | 1.6.2-1.el8ap, 1.6.2-1.el9ap, 1.6.2-2.el9ap | 13.10.2025 |
SB2025101341 SB2025111857 SB2025111935 and 4 more |
||
| #VU116427 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') CVE-2025-59682 |
CWE-22 | Medium | 1.6.0-2.1.el8ap, 1.6.0-2.1.el9ap | 03.10.2025 |
SB2025100337 SB2025100340 SB2025100647 and 14 more |
||
| #VU115167 - Allocation of Resources Without Limits or Throttling CVE-2025-58754 |
CWE-770 | Medium | 1.6.2-1.el8ap, 1.6.2-1.el9ap | 12.09.2025 |
SB2025091204 SB2025100104 SB2025100912 and 52 more |
||
| #VU113069 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2025-53643 |
CWE-444 | Medium | 1.6.3-1.el8ap, 1.6.3-1.el9ap, 1.6.3-2.el9ap, 1.6.3-2.el10ap | 18.07.2025 |
SB2025071857 SB2025090377 SB2025091303 and 15 more |
||
| #VU112882 - Uncontrolled Recursion CVE-2025-4565 |
CWE-674 | Medium | 1.6.3-2.el9ap, 1.6.3-2.el10ap | 14.07.2025 |
SB2025071429 SB2025071430 SB2025071431 and 21 more |
||
| #VU107019 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2025-22871 |
CWE-444 | Medium | 1.5.7-1.el8ap, 1.5.7-1.el9ap, 1.5.7-2.el8ap, 1.5.7-2.el9ap | 05.04.2025 |
SB2025040507 SB2025040508 SB2025040739 and 109 more |
||
| #VU105783 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') CVE-2025-26791 |
CWE-79 | Low | 1.5.3-2.el8ap, 1.5.3-2.el9ap | 17.03.2025 |
SB2025031740 SB2025031741 SB2025031771 and 35 more |
||
| #VU105388 - Improper input validation CVE-2025-26699 |
CWE-20 | Medium | 1.5.5-2.el8ap, 1.5.5-2.el9ap | 06.03.2025 |
SB2025030630 SB2025030734 SB2025030802 and 19 more |
||
| #VU100999 - Information Exposure Through Log Files CVE-2024-8775 |
CWE-532 | Low | 1.5.1-1.el8ap, 1.5.1-1.el9ap | 27.11.2024 |
SB2024112745 SB2024112746 SB2024120371 and 14 more |
||
| #VU100998 - Incorrect Authorization CVE-2024-9902 |
CWE-863 | Low | 1.5.1-1.el8ap, 1.5.1-1.el9ap | 27.11.2024 |
SB2024112745 SB2024112746 SB2024120371 and 15 more |
||
| #VU100600 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') CVE-2024-52304 |
CWE-444 | Medium | 1.5.1-2.el8ap, 1.5.1-2.el9ap | 19.11.2024 |
SB2024111901 SB2024111916 SB2024111917 and 19 more |
||
| #VU98132 - Inefficient Regular Expression Complexity CVE-2024-45296 |
CWE-1333 | Low | 1.5.1-1.el8ap, 1.5.1-1.el9ap | 08.10.2024 |
SB2024100822 SB2024100823 SB2024100826 and 87 more |
||
| #VU97758 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\') CVE-2024-45801 |
CWE-1321 | Medium | 1.5.1-1.el8ap, 1.5.1-1.el9ap | 27.09.2024 |
SB2024092751 SB2024100823 SB2024100827 and 32 more |
||
| #VU95442 - Resource exhaustion CVE-2024-41989 |
CWE-400 | High | 1.4.9-2.el8ap, 1.4.9-2.el9ap | 07.08.2024 |
SB2024080722 SB2024080728 SB2024080771 and 14 more |
Showing elements 21 - 40 out of 83