Known vulnerabilities in Red Hat Software Collections 1 for RHEL 7 - page 14

Vendor: Red Hat Inc.
Software: Red Hat Software Collections
Version: 1 for RHEL 7
Software CPE: cpe:2.3:a:red_hat:red_hat_software_collections:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 340
Public exploits: 10
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting Red Hat Software Collections version 1 for RHEL 7 Red Hat Software Collections 1 for RHEL 7 is affected by 340 vulnerabilities: 34 high, 209 medium, 97 low Critical High Medium Low

Vulnerabilities (340)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU27257 - Insufficiently Protected Credentials
CVE-2020-11008		 CWE-522 Low
No
No
 - 23.04.2020 SB2020042343
SB2020042344
SB2020042345
and 18 more
#VU26549 - Heap-based Buffer Overflow
CVE-2020-11100		 CWE-122 High
No
No
 - 02.04.2020 SB2020040219
SB2020040220
SB2020040221
and 13 more
#VU26492 - Deserialization of Untrusted Data
CVE-2020-10969		 CWE-502 High
No
No
 - 01.04.2020 SB2020030909
SB2020042318
SB2020073033
and 14 more
#VU26491 - Deserialization of Untrusted Data
CVE-2020-10968		 CWE-502 High
No
No
 - 01.04.2020 SB2020030909
SB2020042318
SB2020073033
and 15 more
#VU26490 - Deserialization of Untrusted Data
CVE-2020-11113		 CWE-502 High
Public exploit available
No
 - 01.04.2020 SB2020030909
SB2020042318
SB2020073033
and 16 more
#VU26489 - Deserialization of Untrusted Data
CVE-2020-11112		 CWE-502 High
No
No
 - 01.04.2020 SB2020030909
SB2020042318
SB2020073033
and 16 more
#VU26488 - Deserialization of Untrusted Data
CVE-2020-11111		 CWE-502 High
No
No
 - 31.03.2020 SB2020030909
SB2020042318
SB2020073033
and 16 more
#VU25078 - Improper input validation
CVE-2019-16776		 CWE-20 High
No
No
 - 07.02.2020 SB2020011491
SB2020022426
SB2020022514
and 6 more
#VU25014 - Reachable Assertion
CVE-2019-15604		 CWE-617 Medium
No
No
 - 06.02.2020 SB2020020615
SB2020022426
SB2020022514
and 10 more
#VU25013 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2019-15605		 CWE-444 Medium
No
No
 - 06.02.2020 SB2020020615
SB2020022426
SB2020022514
and 19 more
#VU25012 - Improper input validation
CVE-2019-15606		 CWE-20 Medium
No
No
 - 06.02.2020 SB2020020615
SB2020022426
SB2020022514
and 11 more
#VU24686 - Deserialization of Untrusted Data
CVE-2019-17570		 CWE-502 High
No
No
 - 28.01.2020 SB2016070803
SB2020020203
SB2020020716
and 7 more
#VU23888 - UNIX Symbolic Link (Symlink) Following
CVE-2019-16775		 CWE-61 Low
No
No
 - 02.01.2020 SB2019121217
SB2020022426
SB2020022514
and 6 more
#VU23554 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2019-1348		 CWE-22 Medium
No
No
 - 12.12.2019 SB2019121207
SB2019121209
SB2019121215
and 15 more
#VU23880 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2019-16777		 CWE-22 Low
No
No
 - 12.12.2019 SB2019121218
SB2020022426
SB2020022514
and 7 more
#VU23494 - Improper input validation
CVE-2019-1349		 CWE-20 High
No
No
 - 10.12.2019 SB2019121019
SB2019121201
SB2019121207
and 16 more
#VU23492 - Improper input validation
CVE-2019-1352		 CWE-20 High
No
No
 - 10.12.2019 SB2019121019
SB2019121201
SB2019121207
and 18 more
#VU23488 - Improper input validation
CVE-2019-1387		 CWE-20 High
No
No
 - 10.12.2019 SB2019121019
SB2019121201
SB2019121207
and 19 more
#VU21750 - Improper input validation
CVE-2019-17531		 CWE-20 Medium
No
No
 - 13.10.2019 SB2019100711
SB2019120206
SB2019121120
and 24 more
#VU20844 - Protection Mechanism Failure
CVE-2019-10086		 CWE-693 Low
No
No
 - 04.09.2019 SB2019090405
SB2019090406
SB2019121902
and 112 more


Showing elements 261 - 280 out of 340