Known vulnerabilities in Red Hat Software Collections - page 13

Vendor: Red Hat Inc.
Software: Red Hat Software Collections
Software CPE: cpe:2.3:a:red_hat:red_hat_software_collections:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 361
Public exploits: 11
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat Software Collections Red Hat Software Collections is affected by 361 known vulnerabilities: 38 high, 220 medium, 103 low Critical High Medium Low

Vulnerabilities (361)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU53543 - Off-by-one Error
CVE-2021-23017		 CWE-193 High
Available
No
 - 25.05.2021 SB2021052543
SB2021052713
SB2021052901
and 48 more
#VU53233 - Missing release of memory after effective lifetime
CVE-2021-32029		 CWE-401 Medium
No
No
 - 13.05.2021 SB2021051316
SB2021051605
SB2021052507
and 18 more
#VU53232 - Missing release of memory after effective lifetime
CVE-2021-32028		 CWE-401 Medium
No
No
 - 13.05.2021 SB2021051316
SB2021051605
SB2021052507
and 41 more
#VU53231 - Integer overflow
CVE-2021-32027		 CWE-190 Medium
No
No
 - 13.05.2021 SB2021051316
SB2021051605
SB2021052507
and 43 more
#VU52000 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2021-28965		 CWE-611 Medium
No
No
 - 08.04.2021 SB2021040816
SB2021041365
SB2021042119
and 24 more
#VU51645 - Command injection
CVE-2021-27928		 CWE-77 High
Available
No
 - 23.03.2021 SB2021032310
SB2021042124
SB2021042125
and 11 more
#VU50955 - Reliance on Reverse DNS Resolution for a Security-Critical Action
CVE-2021-22884		 CWE-350 Medium
No
No
 - 25.02.2021 SB2021022530
SB2021022532
SB2021022616
and 38 more
#VU50954 - Resource Management Errors
CVE-2021-22883		 CWE-399 Medium
No
No
 - 25.02.2021 SB2021022530
SB2021022532
SB2021022614
and 36 more
#VU50655 - Exposure of sensitive information to an unauthorized actor
CVE-2021-3393		 CWE-200 Low
No
No
 - 11.02.2021 SB2021021136
SB2021022002
SB2021022618
and 9 more
#VU48436 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2020-25695		 CWE-89 Medium
No
No
 - 16.11.2020 SB2020111609
SB2020111711
SB2020111816
and 33 more
#VU48437 - Improper Access Control
CVE-2020-25694		 CWE-284 Medium
No
No
 - 16.11.2020 SB2020111609
SB2020111711
SB2020111815
and 35 more
#VU48438 - Improper input validation
CVE-2020-25696		 CWE-20 Medium
No
No
 - 16.11.2020 SB2020111609
SB2020111711
SB2020111817
and 32 more
#VU47333 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2020-25613		 CWE-444 Medium
Available
No
 - 05.10.2020 SB2020100509
SB2020100703
SB2020111806
and 21 more
#VU49352 - Files or Directories Accessible to External Parties
CVE-2019-3881		 CWE-552 Low
No
No
 - 04.09.2020 SB2020090421
SB2021010812
SB2021060717
and 4 more
#VU31886 - Exposure of sensitive information to an unauthorized actor
CVE-2020-10933		 CWE-200 Low
No
No
 - 26.07.2020 SB2020050439
SB2020050208
SB2020040188
and 11 more
#VU32971 - Improper input validation
CVE-2020-10663		 CWE-20 Medium
No
No
 - 28.04.2020 SB2020042868
SB2020050208
SB2020081273
and 24 more
#VU23009 - Improper Control of Generation of Code ('Code Injection')
CVE-2019-16255		 CWE-94 High
No
No
 - 27.11.2019 SB2019100211
SB2019112701
SB2019121714
and 14 more
#VU23008 - Improper Neutralization of CRLF Sequences in HTTP Headers ('HTTP Response Splitting')
CVE-2019-16254		 CWE-113 Medium
No
No
 - 27.11.2019 SB2019100211
SB2019112701
SB2019121714
and 14 more
#VU23007 - Improper input validation
CVE-2019-16201		 CWE-20 Medium
No
No
 - 27.11.2019 SB2019100211
SB2019112701
SB2019121714
and 14 more
#VU23006 - Improper input validation
CVE-2019-15845		 CWE-20 Medium
No
No
 - 26.11.2019 SB2019100211
SB2019112701
SB2019121714
and 15 more


Showing elements 241 - 260 out of 361