[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fpydKQxwZ4nodyix22wCcd6uxut8-haNKIm7e17NcIhU":3,"g5a-family:redhat\u002Fenterprise_linux_for_power_big_endian":209,"g5a-ex:redhat\u002Fenterprise_linux_for_power_big_endian@*":213},{"success":4,"data":5},true,{"product":6,"versions":44,"topVulnerabilitiesByEpss":54,"kevVulnerabilities":112,"seoMetadata":187,"meta":206},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":43},"redhat","enterprise_linux_for_power_big_endian",9,45,15,"2024-01-31",[14,19,22,25,28,31,34,36,39],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"4.0",1,0,false,{"version":20,"cve_count":21,"kev_count":17,"has_kev":18},"5.0",3,{"version":23,"cve_count":24,"kev_count":24,"has_kev":4},"5.0_ppc",4,{"version":26,"cve_count":27,"kev_count":27,"has_kev":4},"5.9_ppc",2,{"version":29,"cve_count":30,"kev_count":17,"has_kev":18},"6.0",6,{"version":32,"cve_count":33,"kev_count":33,"has_kev":4},"6.0_ppc64",10,{"version":35,"cve_count":27,"kev_count":27,"has_kev":4},"6.4_ppc64",{"version":37,"cve_count":38,"kev_count":21,"has_kev":4},"7.0",25,{"version":40,"cve_count":41,"kev_count":42,"has_kev":4},"7.0_ppc64",13,11,"Enterprise Linux For Power Big Endian by Redhat is a technology product with 9 tracked versions and 45 known security vulnerabilities including 15 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[45,46,47,48,49,50,51,52,53],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":21,"kev_count":17,"has_kev":18},{"version":23,"cve_count":24,"kev_count":24,"has_kev":4},{"version":26,"cve_count":27,"kev_count":27,"has_kev":4},{"version":29,"cve_count":30,"kev_count":17,"has_kev":18},{"version":32,"cve_count":33,"kev_count":33,"has_kev":4},{"version":35,"cve_count":27,"kev_count":27,"has_kev":4},{"version":37,"cve_count":38,"kev_count":21,"has_kev":4},{"version":40,"cve_count":41,"kev_count":42,"has_kev":4},[55,63,67,74,79,85,90,95,101,108],{"cveId":56,"description":57,"publishedDate":58,"cvssScore":59,"cvssVersion":60,"severity":61,"isKev":4,"epssScore":62},"CVE-2014-6271","GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka \"ShellShock.\"  NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix.","2014-09-24",9.8,"v3.1","Critical",0.99999,{"cveId":64,"description":65,"publishedDate":66,"cvssScore":9,"cvssVersion":60,"severity":61,"isKev":4,"epssScore":62},"CVE-2021-40438","A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.","2021-09-16",{"cveId":68,"description":69,"publishedDate":70,"cvssScore":71,"cvssVersion":60,"severity":72,"isKev":4,"epssScore":73},"CVE-2017-12617","When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default servlet to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.","2017-10-04",8.1,"High",0.99968,{"cveId":75,"description":76,"publishedDate":77,"cvssScore":59,"cvssVersion":60,"severity":61,"isKev":4,"epssScore":78},"CVE-2014-7169","GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown other impact via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-6271.","2014-09-25",0.9994,{"cveId":80,"description":81,"publishedDate":82,"cvssScore":83,"cvssVersion":60,"severity":72,"isKev":4,"epssScore":84},"CVE-2019-11043","In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buffers into the space reserved for FCGI protocol data, thus opening the possibility of remote code execution.","2019-10-28",8.7,0.99748,{"cveId":86,"description":87,"publishedDate":88,"cvssScore":71,"cvssVersion":60,"severity":72,"isKev":4,"epssScore":89},"CVE-2017-12615","When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.","2017-09-19",0.99707,{"cveId":91,"description":92,"publishedDate":93,"cvssScore":59,"cvssVersion":60,"severity":61,"isKev":4,"epssScore":94},"CVE-2019-5544","OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8.","2019-12-06",0.98129,{"cveId":96,"description":97,"publishedDate":98,"cvssScore":99,"cvssVersion":60,"severity":72,"isKev":4,"epssScore":100},"CVE-2021-4034","A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully executed the attack can cause a local privilege escalation given unprivileged users administrative rights on the target machine.","2022-01-28",7.8,0.94921,{"cveId":102,"description":103,"publishedDate":104,"cvssScore":105,"cvssVersion":60,"severity":106,"isKev":4,"epssScore":107},"CVE-2016-3718","The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image.","2016-05-05",5.5,"Medium",0.7565,{"cveId":109,"description":110,"publishedDate":104,"cvssScore":105,"cvssVersion":60,"severity":106,"isKev":4,"epssScore":111},"CVE-2016-3715","The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.",0.75307,[113,121,126,135,139,142,145,154,162,169,172,174,177,181,184],{"cveId":114,"description":115,"publishedDate":12,"cvssScore":99,"severity":72,"isKev":4,"epssScore":116,"cisaVulnName":117,"cisaDateAdded":118,"cisaShortDescription":119,"cisaRequiredAction":120},"CVE-2024-1086","A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.\n\n\n\nThe nft_verdict_init() function allows positive values as drop error within the hook verdict, and hence the nf_hook_slow() function can cause a double free vulnerability when NF_DROP is issued with a drop error which resembles NF_ACCEPT.\n\n\n\nWe recommend upgrading past commit f342de4e2f33e0e39165d8639387aa6c19dff660.",0.28058,"Linux Kernel Use-After-Free Vulnerability","2024-05-30","Linux kernel contains a use-after-free vulnerability in the netfilter: nf_tables component that allows an attacker to achieve local privilege escalation.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"cveId":96,"description":97,"publishedDate":98,"cvssScore":99,"severity":72,"isKev":4,"epssScore":100,"cisaVulnName":122,"cisaDateAdded":123,"cisaShortDescription":124,"cisaRequiredAction":125},"Red Hat Polkit Out-of-Bounds Read and Write Vulnerability","2022-06-27","The Red Hat polkit pkexec utility contains an out-of-bounds read and write vulnerability that allows for privilege escalation with administrative rights.","Apply updates per vendor instructions.",{"cveId":127,"description":128,"publishedDate":129,"cvssScore":130,"severity":72,"isKev":4,"epssScore":131,"cisaVulnName":132,"cisaDateAdded":133,"cisaShortDescription":134,"cisaRequiredAction":125},"CVE-2019-8720","A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code execution. Improved memory handling addresses the multiple memory corruption issues.","2023-03-06",8.8,0.01556,"WebKitGTK Memory Corruption Vulnerability","2022-05-23","WebKitGTK contains a memory corruption vulnerability which can allow an attacker to perform remote code execution.",{"cveId":86,"description":87,"publishedDate":88,"cvssScore":71,"severity":72,"isKev":4,"epssScore":89,"cisaVulnName":136,"cisaDateAdded":137,"cisaShortDescription":138,"cisaRequiredAction":125},"Apache Tomcat on Windows Remote Code Execution Vulnerability","2022-03-25","When running Apache Tomcat on Windows with HTTP PUTs enabled, it is possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.",{"cveId":68,"description":69,"publishedDate":70,"cvssScore":71,"severity":72,"isKev":4,"epssScore":73,"cisaVulnName":140,"cisaDateAdded":137,"cisaShortDescription":141,"cisaRequiredAction":125},"Apache Tomcat Remote Code Execution Vulnerability","When running Apache Tomcat, it is possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.",{"cveId":80,"description":81,"publishedDate":82,"cvssScore":83,"severity":72,"isKev":4,"epssScore":84,"cisaVulnName":143,"cisaDateAdded":137,"cisaShortDescription":144,"cisaRequiredAction":125},"PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability","In some versions of PHP in certain configurations of FPM setup, it is possible to cause FPM module to write past allocated buffers allowing the possibility of remote code execution.",{"cveId":146,"description":147,"publishedDate":148,"cvssScore":149,"severity":106,"isKev":4,"epssScore":150,"cisaVulnName":151,"cisaDateAdded":152,"cisaShortDescription":153,"cisaRequiredAction":125},"CVE-2015-4902","Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment.","2015-10-22",5.3,0.13603,"Oracle Java SE Integrity Check Vulnerability","2022-03-03","Unspecified vulnerability in Oracle Java SE allows remote attackers to affect integrity via Unknown vectors related to deployment.",{"cveId":155,"description":156,"publishedDate":157,"cvssScore":158,"severity":106,"isKev":4,"epssScore":159,"cisaVulnName":160,"cisaDateAdded":152,"cisaShortDescription":161,"cisaRequiredAction":125},"CVE-2013-1675","Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 do not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.","2013-05-16",6.5,0.06696,"Mozilla Firefox Information Disclosure Vulnerability","Mozilla Firefox does not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.",{"cveId":163,"description":164,"publishedDate":165,"cvssScore":59,"severity":61,"isKev":4,"epssScore":166,"cisaVulnName":167,"cisaDateAdded":152,"cisaShortDescription":168,"cisaRequiredAction":125},"CVE-2015-2590","Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2015-4732.","2015-07-16",0.25469,"Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability","An unspecified vulnerability exists within Oracle Java Runtime Environment that allows an attacker to perform remote code execution.",{"cveId":75,"description":76,"publishedDate":77,"cvssScore":59,"severity":61,"isKev":4,"epssScore":78,"cisaVulnName":170,"cisaDateAdded":98,"cisaShortDescription":171,"cisaRequiredAction":125},"GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability","GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code. This CVE correctly remediates the vulnerability in CVE-2014-6271.",{"cveId":56,"description":57,"publishedDate":58,"cvssScore":59,"severity":61,"isKev":4,"epssScore":62,"cisaVulnName":170,"cisaDateAdded":98,"cisaShortDescription":173,"cisaRequiredAction":125},"GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code.",{"cveId":64,"description":65,"publishedDate":66,"cvssScore":9,"severity":61,"isKev":4,"epssScore":62,"cisaVulnName":175,"cisaDateAdded":176,"cisaShortDescription":65,"cisaRequiredAction":125},"Apache HTTP Server-Side Request Forgery (SSRF)","2021-12-01",{"cveId":109,"description":110,"publishedDate":104,"cvssScore":105,"severity":106,"isKev":4,"epssScore":111,"cisaVulnName":178,"cisaDateAdded":179,"cisaShortDescription":180,"cisaRequiredAction":125},"ImageMagick Arbitrary File Deletion Vulnerability","2021-11-03","ImageMagick contains an unspecified vulnerability that could allow users to delete files by using ImageMagick's 'ephemeral' pseudo protocol, which deletes files after reading.",{"cveId":91,"description":92,"publishedDate":93,"cvssScore":59,"severity":61,"isKev":4,"epssScore":94,"cisaVulnName":182,"cisaDateAdded":179,"cisaShortDescription":183,"cisaRequiredAction":125},"VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability","VMware ESXi and Horizon Desktop as a Service (DaaS) OpenSLP contains a heap-based buffer overflow vulnerability that allows an attacker with network access to port 427 to overwrite the heap of the OpenSLP service to perform remote code execution.",{"cveId":102,"description":103,"publishedDate":104,"cvssScore":105,"severity":106,"isKev":4,"epssScore":107,"cisaVulnName":185,"cisaDateAdded":179,"cisaShortDescription":186,"cisaRequiredAction":125},"ImageMagick Server-Side Request Forgery (SSRF) Vulnerability","ImageMagick contains an unspecified vulnerability that allows attackers to perform server-side request forgery (SSRF) via a crafted image.",{"title":188,"metaDescription":189,"keywords":190,"structuredData":191},"Enterprise Linux For Power Big Endian by Redhat - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Enterprise Linux For Power Big Endian by Redhat covering 9 versions with 45 tracked vulnerabilities including 5 critical and 6 high-severity issues and 15 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Enterprise Linux For Power Big Endian vulnerabilities, Enterprise Linux For Power Big Endian security, Enterprise Linux For Power Big Endian CVE, Redhat Enterprise Linux For Power Big Endian, Enterprise Linux For Power Big Endian threat intelligence, Redhat security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Enterprise Linux For Power Big Endian KEV, Enterprise Linux For Power Big Endian exploited vulnerabilities",{"@context":192,"@type":193,"name":194,"description":189,"url":195,"manufacturer":196,"applicationCategory":200,"softwareVersion":201,"mainEntity":202},"https:\u002F\u002Fschema.org","SoftwareApplication","Enterprise Linux For Power Big Endian","https:\u002F\u002Fedgeprotect.io\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fredhat\u002Fenterprise_linux_for_power_big_endian",{"@type":197,"name":198,"url":199},"Organization","Redhat","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fredhat","Security Software","9 versions tracked",{"@type":203,"name":204,"description":205,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Enterprise Linux For Power Big Endian Security Vulnerabilities","Security vulnerabilities affecting Enterprise Linux For Power Big Endian by Redhat",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":207,"apiVersion":208},"2026-10-28T18:18:08.828Z","3.0",[210],{"product":211,"cves":212},"enterprise_linux_for_power_big_endian_eus",20,{"rows":214,"total":11,"capped":18,"failed":17},[215,219,223,227,231,235,239,243,247,251,255,259,263,267,271],{"cveId":114,"name":117,"severity":72,"cvss":99,"added":118,"epss":116,"published":216,"ranges":217,"checked":4,"hits":218,"covers":18},"2024-01-31T13:15:10.827",[40],[],{"cveId":96,"name":122,"severity":72,"cvss":99,"added":123,"epss":100,"published":220,"ranges":221,"checked":4,"hits":222,"covers":18},"2022-01-28T20:15:12.193",[37],[],{"cveId":127,"name":132,"severity":72,"cvss":130,"added":133,"epss":131,"published":224,"ranges":225,"checked":4,"hits":226,"covers":18},"2023-03-06T23:15:10.287",[37],[],{"cveId":86,"name":136,"severity":72,"cvss":71,"added":137,"epss":89,"published":228,"ranges":229,"checked":4,"hits":230,"covers":18},"2017-09-19T13:29:00.19",[40],[],{"cveId":68,"name":140,"severity":72,"cvss":71,"added":137,"epss":73,"published":232,"ranges":233,"checked":4,"hits":234,"covers":18},"2017-10-04T01:29:02.12",[32,40],[],{"cveId":80,"name":143,"severity":72,"cvss":83,"added":137,"epss":84,"published":236,"ranges":237,"checked":4,"hits":238,"covers":18},"2019-10-28T15:15:13.863",[32,40],[],{"cveId":146,"name":151,"severity":106,"cvss":149,"added":152,"epss":150,"published":240,"ranges":241,"checked":4,"hits":242,"covers":18},"2015-10-22T00:00:03.093",[23,32,40],[],{"cveId":155,"name":160,"severity":106,"cvss":158,"added":152,"epss":159,"published":244,"ranges":245,"checked":4,"hits":246,"covers":18},"2013-05-16T11:45:30.877",[23,32],[],{"cveId":163,"name":167,"severity":61,"cvss":59,"added":152,"epss":166,"published":248,"ranges":249,"checked":4,"hits":250,"covers":18},"2015-07-16T10:59:17.05",[32,40],[],{"cveId":75,"name":170,"severity":61,"cvss":59,"added":98,"epss":78,"published":252,"ranges":253,"checked":4,"hits":254,"covers":18},"2014-09-25T01:55:04.367",[23,26,32,35,40],[],{"cveId":56,"name":170,"severity":61,"cvss":59,"added":98,"epss":62,"published":256,"ranges":257,"checked":4,"hits":258,"covers":18},"2014-09-24T18:48:04.477",[23,26,32,35,40],[],{"cveId":64,"name":175,"severity":61,"cvss":9,"added":176,"epss":62,"published":260,"ranges":261,"checked":4,"hits":262,"covers":18},"2021-09-16T15:15:07.633",[37],[],{"cveId":109,"name":178,"severity":106,"cvss":105,"added":179,"epss":111,"published":264,"ranges":265,"checked":4,"hits":266,"covers":18},"2016-05-05T18:59:04.727",[32,40],[],{"cveId":91,"name":182,"severity":61,"cvss":59,"added":179,"epss":94,"published":268,"ranges":269,"checked":4,"hits":270,"covers":18},"2019-12-06T16:15:11.467",[32,40],[],{"cveId":102,"name":185,"severity":106,"cvss":105,"added":179,"epss":107,"published":272,"ranges":273,"checked":4,"hits":274,"covers":18},"2016-05-05T18:59:08.96",[32,40],[]]