[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fQK5JR17XI2c9SO6rfa5vl8VGpphm5frNFghYolMof9s":3},{"success":4,"data":5},true,{"vendor":6,"topVulnerabilitiesByEpss":2068,"kevVulnerabilities":2127,"topProductsByCves":2756,"seoMetadata":2767,"meta":2776},{"vendorId":7,"vendorName":8,"productCount":9,"cveCount":10,"kevCount":11,"versionCount":12,"lastCveUpdate":13,"firstLetter":14,"products":15,"description":2067},26768,"redhat",538,5740,89,9928,"2026-03-27","r",[16,22,29,36,41,47,52,57,64,71,78,84,91,97,104,110,117,123,129,135,141,147,150,155,159,163,167,170,174,178,183,189,194,199,203,208,212,216,221,226,229,234,239,242,245,249,253,257,262,266,270,275,279,283,286,289,293,298,302,305,308,312,317,322,326,329,332,337,342,346,350,355,359,362,365,369,372,376,380,384,387,390,394,398,401,405,409,414,417,422,427,430,433,438,441,444,449,452,455,458,462,466,470,473,477,481,484,488,492,496,499,504,508,512,517,522,526,530,533,537,541,545,549,553,557,561,564,567,571,575,578,582,585,589,592,596,600,604,607,611,616,620,624,628,632,636,640,644,648,651,654,657,660,664,668,672,676,681,685,688,692,696,701,705,709,713,716,720,724,729,734,737,740,743,748,753,756,759,763,767,771,774,778,781,785,789,793,796,800,804,808,812,816,820,823,827,830,834,838,842,846,849,853,857,860,864,867,871,875,879,883,886,890,894,897,901,905,909,913,916,920,924,927,931,935,939,943,947,951,954,957,960,963,967,971,975,980,984,988,992,997,1001,1005,1009,1013,1016,1020,1024,1028,1032,1035,1039,1043,1047,1051,1055,1059,1063,1066,1070,1073,1077,1080,1084,1088,1091,1094,1097,1101,1104,1108,1112,1115,1119,1122,1126,1129,1133,1137,1142,1145,1149,1152,1156,1159,1163,1167,1171,1175,1178,1181,1185,1189,1193,1197,1202,1206,1210,1214,1218,1222,1225,1229,1232,1237,1240,1244,1248,1252,1255,1258,1262,1265,1269,1273,1277,1281,1285,1288,1292,1296,1299,1302,1307,1311,1314,1317,1320,1324,1328,1332,1336,1340,1343,1346,1349,1352,1356,1359,1362,1365,1368,1372,1376,1381,1385,1389,1393,1397,1400,1403,1407,1411,1414,1417,1420,1424,1427,1431,1434,1438,1443,1447,1451,1456,1459,1463,1467,1471,1475,1478,1481,1485,1488,1492,1496,1500,1503,1507,1511,1515,1519,1523,1526,1530,1534,1538,1541,1545,1549,1552,1555,1558,1562,1565,1569,1573,1577,1580,1584,1587,1591,1595,1599,1602,1605,1608,1611,1614,1618,1621,1625,1628,1632,1636,1639,1642,1646,1649,1654,1658,1661,1665,1669,1673,1676,1680,1684,1687,1691,1696,1699,1703,1707,1712,1715,1718,1722,1725,1728,1731,1736,1740,1745,1749,1753,1757,1760,1763,1766,1769,1772,1775,1778,1781,1785,1789,1793,1797,1800,1803,1807,1811,1815,1819,1823,1827,1830,1834,1838,1841,1844,1848,1851,1854,1858,1862,1865,1869,1873,1876,1880,1884,1887,1890,1893,1896,1899,1903,1906,1910,1913,1916,1920,1925,1928,1932,1936,1940,1943,1947,1951,1955,1959,1963,1966,1970,1974,1977,1980,1983,1986,1989,1992,1995,1998,2001,2004,2007,2010,2013,2016,2019,2022,2025,2028,2031,2034,2037,2040,2043,2046,2049,2052,2055,2058,2061,2064],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":21,"last_cve_update":13},136663,"enterprise_linux",57,2039,23,{"id":23,"product_name":24,"version_count":25,"cve_count":26,"kev_count":27,"last_cve_update":28},136672,"enterprise_linux_desktop",21,1947,56,"2024-01-31",{"id":30,"product_name":31,"version_count":32,"cve_count":33,"kev_count":34,"last_cve_update":35},136712,"enterprise_linux_server",18,1913,58,"2025-06-12",{"id":37,"product_name":38,"version_count":39,"cve_count":40,"kev_count":19,"last_cve_update":28},136733,"enterprise_linux_workstation",8,1850,{"id":42,"product_name":43,"version_count":44,"cve_count":45,"kev_count":46,"last_cve_update":35},136713,"enterprise_linux_server_aus",20,1055,36,{"id":48,"product_name":49,"version_count":46,"cve_count":50,"kev_count":51,"last_cve_update":35},136676,"enterprise_linux_eus",783,38,{"id":53,"product_name":54,"version_count":55,"cve_count":56,"kev_count":44,"last_cve_update":35},136725,"enterprise_linux_server_tus",12,765,{"id":58,"product_name":59,"version_count":60,"cve_count":61,"kev_count":62,"last_cve_update":63},136714,"enterprise_linux_server_eus",29,625,9,"2022-08-22",{"id":65,"product_name":66,"version_count":67,"cve_count":68,"kev_count":69,"last_cve_update":70},136916,"openshift_container_platform",761,267,7,"2026-03-04",{"id":72,"product_name":73,"version_count":74,"cve_count":75,"kev_count":76,"last_cve_update":77},136866,"linux",27,252,0,"2025-06-18",{"id":79,"product_name":80,"version_count":81,"cve_count":82,"kev_count":83,"last_cve_update":13},136803,"jboss_enterprise_application_platform",100,235,6,{"id":85,"product_name":86,"version_count":87,"cve_count":88,"kev_count":89,"last_cve_update":90},137002,"satellite",133,223,4,"2024-09-04",{"id":92,"product_name":93,"version_count":94,"cve_count":95,"kev_count":76,"last_cve_update":96},136945,"openstack",30,213,"2023-05-12",{"id":98,"product_name":99,"version_count":100,"cve_count":101,"kev_count":102,"last_cve_update":103},136908,"openshift",68,177,2,"2026-03-25",{"id":105,"product_name":106,"version_count":107,"cve_count":108,"kev_count":102,"last_cve_update":109},136702,"enterprise_linux_hpc_node",3,149,"2017-07-25",{"id":111,"product_name":112,"version_count":113,"cve_count":114,"kev_count":115,"last_cve_update":116},137020,"software_collections",14,137,5,"2023-12-10",{"id":118,"product_name":119,"version_count":120,"cve_count":121,"kev_count":115,"last_cve_update":122},137065,"virtualization",11,128,"2023-10-06",{"id":124,"product_name":125,"version_count":126,"cve_count":127,"kev_count":128,"last_cve_update":35},136683,"enterprise_linux_for_ibm_z_systems",25,108,19,{"id":130,"product_name":131,"version_count":132,"cve_count":133,"kev_count":134,"last_cve_update":35},136691,"enterprise_linux_for_power_little_endian",10,103,15,{"id":136,"product_name":137,"version_count":138,"cve_count":139,"kev_count":140,"last_cve_update":13},137013,"single_sign-on",17,101,1,{"id":142,"product_name":143,"version_count":144,"cve_count":145,"kev_count":76,"last_cve_update":146},136847,"keycloak",144,95,"2025-08-06",{"id":148,"product_name":149,"version_count":94,"cve_count":11,"kev_count":113,"last_cve_update":35},136692,"enterprise_linux_for_power_little_endian_eus",{"id":151,"product_name":152,"version_count":102,"cve_count":153,"kev_count":76,"last_cve_update":154},136734,"enterprise_linux_workstation_supplementary",86,"2017-05-23",{"id":156,"product_name":157,"version_count":69,"cve_count":158,"kev_count":76,"last_cve_update":154},136722,"enterprise_linux_server_supplementary",84,{"id":160,"product_name":161,"version_count":107,"cve_count":158,"kev_count":76,"last_cve_update":162},136673,"enterprise_linux_desktop_supplementary","2016-05-14",{"id":164,"product_name":165,"version_count":113,"cve_count":166,"kev_count":102,"last_cve_update":109},136703,"enterprise_linux_hpc_node_eus",83,{"id":168,"product_name":169,"version_count":89,"cve_count":166,"kev_count":102,"last_cve_update":162},136724,"enterprise_linux_server_supplementary_eus",{"id":171,"product_name":172,"version_count":140,"cve_count":166,"kev_count":107,"last_cve_update":173},137068,"virtualization_host","2024-02-07",{"id":175,"product_name":176,"version_count":177,"cve_count":166,"kev_count":134,"last_cve_update":35},136685,"enterprise_linux_for_ibm_z_systems_eus",32,{"id":179,"product_name":180,"version_count":113,"cve_count":181,"kev_count":76,"last_cve_update":182},136748,"fedora_core",81,"2007-11-26",{"id":184,"product_name":185,"version_count":186,"cve_count":187,"kev_count":76,"last_cve_update":188},136865,"libvirt",264,73,"2024-08-30",{"id":190,"product_name":191,"version_count":192,"cve_count":187,"kev_count":76,"last_cve_update":193},136735,"enterprise_mrg",16,"2020-12-11",{"id":195,"product_name":196,"version_count":140,"cve_count":197,"kev_count":76,"last_cve_update":198},136867,"linux_advanced_workstation",71,"2008-05-23",{"id":200,"product_name":201,"version_count":102,"cve_count":197,"kev_count":62,"last_cve_update":202},136699,"enterprise_linux_for_scientific_computing","2024-01-18",{"id":204,"product_name":205,"version_count":145,"cve_count":206,"kev_count":76,"last_cve_update":207},136575,"ansible_tower",66,"2022-08-25",{"id":209,"product_name":210,"version_count":21,"cve_count":211,"kev_count":115,"last_cve_update":35},136718,"enterprise_linux_server_for_power_little_endian_update_services_for_sap_solutions",60,{"id":213,"product_name":214,"version_count":76,"cve_count":19,"kev_count":76,"last_cve_update":215},136705,"enterprise_linux_kernel-based_virtual_machine","2024-06-13",{"id":217,"product_name":218,"version_count":21,"cve_count":219,"kev_count":140,"last_cve_update":220},136606,"cloudforms",48,"2021-06-07",{"id":222,"product_name":223,"version_count":134,"cve_count":224,"kev_count":140,"last_cve_update":225},136666,"enterprise_linux_aus",45,"2024-06-12",{"id":227,"product_name":228,"version_count":62,"cve_count":224,"kev_count":134,"last_cve_update":28},136689,"enterprise_linux_for_power_big_endian",{"id":230,"product_name":231,"version_count":232,"cve_count":224,"kev_count":76,"last_cve_update":233},136564,"ansible",361,"2024-02-06",{"id":235,"product_name":236,"version_count":140,"cve_count":237,"kev_count":76,"last_cve_update":238},136870,"linux_desktop",44,"2018-12-11",{"id":240,"product_name":241,"version_count":140,"cve_count":237,"kev_count":76,"last_cve_update":238},136872,"linux_server",{"id":243,"product_name":244,"version_count":140,"cve_count":237,"kev_count":76,"last_cve_update":238},136873,"linux_workstation",{"id":246,"product_name":247,"version_count":69,"cve_count":248,"kev_count":102,"last_cve_update":173},136693,"enterprise_linux_for_real_time",43,{"id":250,"product_name":251,"version_count":120,"cve_count":248,"kev_count":140,"last_cve_update":252},136593,"ceph_storage","2023-12-18",{"id":254,"product_name":255,"version_count":55,"cve_count":248,"kev_count":115,"last_cve_update":256},136726,"enterprise_linux_server_update_services_for_sap_solutions","2024-06-06",{"id":258,"product_name":259,"version_count":60,"cve_count":260,"kev_count":76,"last_cve_update":261},136615,"cloudforms_management_engine",42,"2022-07-06",{"id":263,"product_name":264,"version_count":132,"cve_count":260,"kev_count":140,"last_cve_update":265},136815,"jboss_fuse","2024-08-21",{"id":267,"product_name":268,"version_count":132,"cve_count":269,"kev_count":115,"last_cve_update":35},136679,"enterprise_linux_for_arm_64",40,{"id":271,"product_name":272,"version_count":273,"cve_count":274,"kev_count":76,"last_cve_update":13},137056,"undertow",174,37,{"id":276,"product_name":277,"version_count":89,"cve_count":274,"kev_count":107,"last_cve_update":278},136619,"codeready_linux_builder","2024-02-15",{"id":280,"product_name":281,"version_count":132,"cve_count":274,"kev_count":76,"last_cve_update":282},136736,"enterprise_virtualization","2020-02-25",{"id":284,"product_name":285,"version_count":115,"cve_count":274,"kev_count":102,"last_cve_update":173},136695,"enterprise_linux_for_real_time_for_nfv",{"id":287,"product_name":288,"version_count":132,"cve_count":274,"kev_count":140,"last_cve_update":265},136952,"openstack_platform",{"id":290,"product_name":291,"version_count":39,"cve_count":46,"kev_count":107,"last_cve_update":292},136813,"jboss_enterprise_web_server","2021-05-28",{"id":294,"product_name":295,"version_count":140,"cve_count":296,"kev_count":76,"last_cve_update":297},136912,"openshift_application_runtimes",33,"2023-09-14",{"id":299,"product_name":300,"version_count":113,"cve_count":301,"kev_count":89,"last_cve_update":35},136681,"enterprise_linux_for_arm_64_eus",31,{"id":303,"product_name":304,"version_count":107,"cve_count":301,"kev_count":102,"last_cve_update":252},137031,"storage",{"id":306,"product_name":307,"version_count":140,"cve_count":301,"kev_count":107,"last_cve_update":35},136796,"jboss_core_services",{"id":309,"product_name":310,"version_count":39,"cve_count":74,"kev_count":76,"last_cve_update":311},136746,"fedora","2018-11-09",{"id":313,"product_name":314,"version_count":315,"cve_count":74,"kev_count":76,"last_cve_update":316},136571,"ansible_engine",210,"2022-03-03",{"id":318,"product_name":319,"version_count":113,"cve_count":320,"kev_count":76,"last_cve_update":321},136650,"directory_server",26,"2024-07-09",{"id":323,"product_name":324,"version_count":55,"cve_count":320,"kev_count":140,"last_cve_update":325},136760,"gluster_storage","2022-02-21",{"id":327,"product_name":328,"version_count":120,"cve_count":126,"kev_count":140,"last_cve_update":252},136798,"jboss_data_grid",{"id":330,"product_name":331,"version_count":32,"cve_count":126,"kev_count":107,"last_cve_update":13},136755,"fuse",{"id":333,"product_name":334,"version_count":296,"cve_count":335,"kev_count":76,"last_cve_update":336},136821,"jboss_operations_network",24,"2021-12-14",{"id":338,"product_name":339,"version_count":340,"cve_count":335,"kev_count":140,"last_cve_update":341},136970,"quay",76,"2024-10-17",{"id":343,"product_name":344,"version_count":69,"cve_count":21,"kev_count":140,"last_cve_update":345},136566,"ansible_automation_platform","2025-07-11",{"id":347,"product_name":348,"version_count":113,"cve_count":21,"kev_count":76,"last_cve_update":349},136807,"jboss_enterprise_brms_platform","2017-11-09",{"id":351,"product_name":352,"version_count":55,"cve_count":353,"kev_count":76,"last_cve_update":354},136809,"jboss_enterprise_portal_platform",22,"2015-07-16",{"id":356,"product_name":357,"version_count":115,"cve_count":353,"kev_count":102,"last_cve_update":358},136697,"enterprise_linux_for_real_time_for_nfv_tus","2022-08-26",{"id":360,"product_name":361,"version_count":140,"cve_count":25,"kev_count":140,"last_cve_update":13},136967,"process_automation",{"id":363,"product_name":364,"version_count":39,"cve_count":25,"kev_count":140,"last_cve_update":225},136729,"enterprise_linux_tus",{"id":366,"product_name":367,"version_count":115,"cve_count":25,"kev_count":76,"last_cve_update":368},136812,"jboss_enterprise_web_platform","2020-03-11",{"id":370,"product_name":371,"version_count":115,"cve_count":25,"kev_count":102,"last_cve_update":358},136698,"enterprise_linux_for_real_time_tus",{"id":373,"product_name":374,"version_count":39,"cve_count":25,"kev_count":140,"last_cve_update":375},136942,"openshift_service_mesh","2024-09-19",{"id":377,"product_name":378,"version_count":83,"cve_count":25,"kev_count":140,"last_cve_update":379},136588,"build_of_quarkus","2023-12-09",{"id":381,"product_name":382,"version_count":132,"cve_count":25,"kev_count":102,"last_cve_update":383},136730,"enterprise_linux_update_services_for_sap_solutions","2025-02-27",{"id":385,"product_name":386,"version_count":140,"cve_count":44,"kev_count":140,"last_cve_update":265},136779,"integration_camel_k",{"id":388,"product_name":389,"version_count":120,"cve_count":44,"kev_count":140,"last_cve_update":35},136922,"openshift_container_platform_for_power",{"id":391,"product_name":392,"version_count":134,"cve_count":44,"kev_count":55,"last_cve_update":393},136690,"enterprise_linux_for_power_big_endian_eus","2023-10-03",{"id":395,"product_name":396,"version_count":89,"cve_count":44,"kev_count":140,"last_cve_update":397},136642,"decision_manager","2023-10-10",{"id":399,"product_name":400,"version_count":69,"cve_count":128,"kev_count":102,"last_cve_update":383},136620,"codeready_linux_builder_eus",{"id":402,"product_name":403,"version_count":55,"cve_count":128,"kev_count":76,"last_cve_update":404},136739,"enterprise_virtualization_manager","2019-11-09",{"id":406,"product_name":407,"version_count":132,"cve_count":128,"kev_count":76,"last_cve_update":408},136599,"certificate_system","2022-07-14",{"id":410,"product_name":411,"version_count":412,"cve_count":32,"kev_count":76,"last_cve_update":413},136976,"resteasy",122,"2023-02-17",{"id":415,"product_name":416,"version_count":132,"cve_count":32,"kev_count":76,"last_cve_update":13},136640,"data_grid",{"id":418,"product_name":419,"version_count":420,"cve_count":32,"kev_count":76,"last_cve_update":421},137075,"wildfly",49,"2025-01-30",{"id":423,"product_name":424,"version_count":425,"cve_count":32,"kev_count":76,"last_cve_update":426},136791,"jboss_bpm_suite",13,"2019-01-02",{"id":428,"product_name":429,"version_count":115,"cve_count":138,"kev_count":140,"last_cve_update":397},136785,"jboss_a-mq",{"id":431,"product_name":432,"version_count":132,"cve_count":138,"kev_count":76,"last_cve_update":368},136811,"jboss_enterprise_soa_platform",{"id":434,"product_name":435,"version_count":436,"cve_count":192,"kev_count":76,"last_cve_update":437},136591,"ceph",329,"2023-01-17",{"id":439,"product_name":440,"version_count":140,"cve_count":134,"kev_count":76,"last_cve_update":358},136648,"developer_tools",{"id":442,"product_name":443,"version_count":55,"cve_count":134,"kev_count":76,"last_cve_update":35},136921,"openshift_container_platform_for_linuxone",{"id":445,"product_name":446,"version_count":447,"cve_count":113,"kev_count":76,"last_cve_update":448},136579,"automatic_bug_reporting_tool",67,"2020-01-14",{"id":450,"product_name":451,"version_count":39,"cve_count":425,"kev_count":102,"last_cve_update":383},136624,"codeready_linux_builder_for_arm64_eus",{"id":453,"product_name":454,"version_count":83,"cve_count":425,"kev_count":102,"last_cve_update":383},136626,"codeready_linux_builder_for_ibm_z_systems_eus",{"id":456,"product_name":457,"version_count":89,"cve_count":425,"kev_count":76,"last_cve_update":316},137070,"virtualization_manager",{"id":459,"product_name":460,"version_count":115,"cve_count":425,"kev_count":76,"last_cve_update":461},137004,"satellite_capsule","2021-05-27",{"id":463,"product_name":464,"version_count":62,"cve_count":425,"kev_count":76,"last_cve_update":465},136612,"cloudforms_3.0_management_engine","2017-10-18",{"id":467,"product_name":468,"version_count":107,"cve_count":55,"kev_count":62,"last_cve_update":469},136719,"enterprise_linux_server_from_rhui","2016-05-11",{"id":471,"product_name":472,"version_count":62,"cve_count":55,"kev_count":102,"last_cve_update":383},136628,"codeready_linux_builder_for_power_little_endian_eus",{"id":474,"product_name":475,"version_count":107,"cve_count":55,"kev_count":76,"last_cve_update":476},137024,"spacewalk","2020-02-17",{"id":478,"product_name":479,"version_count":89,"cve_count":120,"kev_count":140,"last_cve_update":480},136627,"codeready_linux_builder_for_power_little_endian","2023-12-27",{"id":482,"product_name":483,"version_count":89,"cve_count":120,"kev_count":140,"last_cve_update":278},136625,"codeready_linux_builder_for_ibm_z_systems",{"id":485,"product_name":486,"version_count":83,"cve_count":120,"kev_count":140,"last_cve_update":487},137039,"subscription_asset_manager","2020-02-19",{"id":489,"product_name":490,"version_count":120,"cve_count":120,"kev_count":76,"last_cve_update":491},136550,"3scale_api_management","2023-11-06",{"id":493,"product_name":494,"version_count":132,"cve_count":132,"kev_count":76,"last_cve_update":495},136934,"openshift_origin","2019-11-21",{"id":497,"product_name":498,"version_count":76,"cve_count":132,"kev_count":76,"last_cve_update":13},136805,"jboss_enterprise_application_platform_expansion_pack",{"id":500,"product_name":501,"version_count":502,"cve_count":132,"kev_count":76,"last_cve_update":503},136956,"ovirt-engine",286,"2020-08-24",{"id":505,"product_name":506,"version_count":44,"cve_count":132,"kev_count":76,"last_cve_update":507},136773,"icedtea-web","2014-05-14",{"id":509,"product_name":510,"version_count":55,"cve_count":132,"kev_count":76,"last_cve_update":511},136900,"network_satellite","2015-05-14",{"id":513,"product_name":514,"version_count":515,"cve_count":132,"kev_count":76,"last_cve_update":516},137012,"shim",28,"2024-01-29",{"id":518,"product_name":519,"version_count":520,"cve_count":62,"kev_count":76,"last_cve_update":521},136770,"icedtea",116,"2017-04-24",{"id":523,"product_name":524,"version_count":102,"cve_count":62,"kev_count":76,"last_cve_update":525},136704,"enterprise_linux_hpc_node_supplementary","2016-06-03",{"id":527,"product_name":528,"version_count":44,"cve_count":62,"kev_count":140,"last_cve_update":529},136553,"advanced_cluster_management_for_kubernetes","2025-07-02",{"id":531,"product_name":532,"version_count":140,"cve_count":62,"kev_count":76,"last_cve_update":358},136643,"descision_manager",{"id":534,"product_name":535,"version_count":102,"cve_count":62,"kev_count":76,"last_cve_update":536},136894,"mrg_realtime","2019-08-14",{"id":538,"product_name":539,"version_count":55,"cve_count":62,"kev_count":76,"last_cve_update":540},136833,"jboss_wildfly_application_server","2018-03-12",{"id":542,"product_name":543,"version_count":107,"cve_count":62,"kev_count":76,"last_cve_update":544},136944,"openssl","2013-02-08",{"id":546,"product_name":547,"version_count":102,"cve_count":62,"kev_count":76,"last_cve_update":548},136600,"certification","2021-05-26",{"id":550,"product_name":551,"version_count":83,"cve_count":62,"kev_count":76,"last_cve_update":552},137025,"spacewalk-java","2016-04-14",{"id":554,"product_name":555,"version_count":89,"cve_count":39,"kev_count":76,"last_cve_update":556},136923,"openshift_container_platform_ibm_z_systems","2024-09-03",{"id":558,"product_name":559,"version_count":140,"cve_count":39,"kev_count":140,"last_cve_update":560},136820,"jboss_middleware_text-only_advisories","2023-09-20",{"id":562,"product_name":563,"version_count":107,"cve_count":39,"kev_count":76,"last_cve_update":173},136622,"codeready_linux_builder_eus_for_power_little_endian_eus",{"id":565,"product_name":566,"version_count":140,"cve_count":39,"kev_count":76,"last_cve_update":560},136780,"integration_camel_quarkus",{"id":568,"product_name":569,"version_count":113,"cve_count":39,"kev_count":76,"last_cve_update":570},136586,"build_of_keycloak","2025-07-18",{"id":572,"product_name":573,"version_count":132,"cve_count":39,"kev_count":76,"last_cve_update":574},136549,"3scale","2024-02-28",{"id":576,"product_name":577,"version_count":107,"cve_count":39,"kev_count":140,"last_cve_update":278},136623,"codeready_linux_builder_for_arm64",{"id":579,"product_name":580,"version_count":581,"cve_count":39,"kev_count":76,"last_cve_update":321},136548,"389_directory_server",321,{"id":583,"product_name":584,"version_count":120,"cve_count":39,"kev_count":76,"last_cve_update":35},136920,"openshift_container_platform_for_ibm_z",{"id":586,"product_name":587,"version_count":69,"cve_count":39,"kev_count":76,"last_cve_update":588},136792,"jboss_brms","2021-06-02",{"id":590,"product_name":591,"version_count":76,"cve_count":69,"kev_count":140,"last_cve_update":397},136781,"integration_service_registry",{"id":593,"product_name":594,"version_count":69,"cve_count":69,"kev_count":76,"last_cve_update":595},136669,"enterprise_linux_compute_node_eus","2019-09-20",{"id":597,"product_name":598,"version_count":102,"cve_count":69,"kev_count":76,"last_cve_update":599},136632,"conga","2014-10-06",{"id":601,"product_name":602,"version_count":102,"cve_count":69,"kev_count":115,"last_cve_update":603},136763,"gluster_storage_server_for_on-premise","2014-09-25",{"id":605,"product_name":606,"version_count":89,"cve_count":69,"kev_count":102,"last_cve_update":393},136686,"enterprise_linux_for_ibm_z_systems_eus_s390x",{"id":608,"product_name":609,"version_count":89,"cve_count":69,"kev_count":76,"last_cve_update":610},136644,"desktop","2008-07-07",{"id":612,"product_name":613,"version_count":614,"cve_count":69,"kev_count":76,"last_cve_update":615},136960,"pagure",126,"2025-05-12",{"id":617,"product_name":618,"version_count":102,"cve_count":69,"kev_count":76,"last_cve_update":619},136657,"dogtag_certificate_system","2014-01-24",{"id":621,"product_name":622,"version_count":128,"cve_count":83,"kev_count":140,"last_cve_update":623},136771,"icedtea6","2019-10-31",{"id":625,"product_name":626,"version_count":107,"cve_count":83,"kev_count":76,"last_cve_update":627},136558,"amq","2022-09-13",{"id":629,"product_name":630,"version_count":140,"cve_count":83,"kev_count":76,"last_cve_update":631},136723,"enterprise_linux_server_supplementary_aus","2014-01-15",{"id":633,"product_name":634,"version_count":515,"cve_count":83,"kev_count":76,"last_cve_update":635},137048,"tcpdump","2014-12-05",{"id":637,"product_name":638,"version_count":140,"cve_count":83,"kev_count":76,"last_cve_update":639},136819,"jboss_middleware","2023-09-27",{"id":641,"product_name":642,"version_count":224,"cve_count":83,"kev_count":140,"last_cve_update":643},136998,"richfaces","2018-11-06",{"id":645,"product_name":646,"version_count":107,"cve_count":83,"kev_count":76,"last_cve_update":647},136570,"ansible_developer","2024-10-16",{"id":649,"product_name":650,"version_count":62,"cve_count":83,"kev_count":76,"last_cve_update":35},136918,"openshift_container_platform_for_arm64",{"id":652,"product_name":653,"version_count":107,"cve_count":83,"kev_count":76,"last_cve_update":647},136573,"ansible_inside",{"id":655,"product_name":656,"version_count":120,"cve_count":83,"kev_count":76,"last_cve_update":368},136823,"jboss_portal",{"id":658,"product_name":659,"version_count":102,"cve_count":83,"kev_count":76,"last_cve_update":325},136710,"enterprise_linux_resilient_storage",{"id":661,"product_name":662,"version_count":83,"cve_count":115,"kev_count":76,"last_cve_update":663},136790,"jboss_application_server","2020-03-10",{"id":665,"product_name":666,"version_count":89,"cve_count":115,"kev_count":76,"last_cve_update":667},136919,"openshift_container_platform_for_ibm_linuxone","2023-12-14",{"id":669,"product_name":670,"version_count":76,"cve_count":115,"kev_count":140,"last_cve_update":671},136927,"openshift_developer_tools_and_services","2025-07-04",{"id":673,"product_name":674,"version_count":138,"cve_count":115,"kev_count":76,"last_cve_update":675},136660,"edeploy","2019-12-15",{"id":677,"product_name":678,"version_count":679,"cve_count":115,"kev_count":76,"last_cve_update":680},136859,"libnbd",143,"2023-11-27",{"id":682,"product_name":683,"version_count":76,"cve_count":115,"kev_count":76,"last_cve_update":684},136665,"enterprise_linux_atomic_host","2020-07-29",{"id":686,"product_name":687,"version_count":107,"cve_count":115,"kev_count":76,"last_cve_update":278},136621,"codeready_linux_builder_eus_for_power_little_endian",{"id":689,"product_name":690,"version_count":69,"cve_count":115,"kev_count":89,"last_cve_update":691},136677,"enterprise_linux_eus_compute_node","2019-10-28",{"id":693,"product_name":694,"version_count":107,"cve_count":115,"kev_count":76,"last_cve_update":695},136678,"enterprise_linux_fast_datapath","2022-08-31",{"id":697,"product_name":698,"version_count":699,"cve_count":115,"kev_count":76,"last_cve_update":700},137076,"wildfly_core",64,"2023-11-08",{"id":702,"product_name":703,"version_count":115,"cve_count":115,"kev_count":140,"last_cve_update":704},136554,"advanced_cluster_security","2024-04-06",{"id":706,"product_name":707,"version_count":89,"cve_count":115,"kev_count":76,"last_cve_update":708},136950,"openstack_for_ibm_power","2023-03-23",{"id":710,"product_name":711,"version_count":107,"cve_count":115,"kev_count":76,"last_cve_update":712},136597,"ceph_storage_osd","2018-08-01",{"id":714,"product_name":715,"version_count":107,"cve_count":115,"kev_count":76,"last_cve_update":712},136596,"ceph_storage_mon",{"id":717,"product_name":718,"version_count":89,"cve_count":115,"kev_count":140,"last_cve_update":719},137005,"satellite_with_embedded_oracle","2014-11-03",{"id":721,"product_name":722,"version_count":102,"cve_count":115,"kev_count":76,"last_cve_update":723},136580,"automation_manager","2019-03-21",{"id":725,"product_name":726,"version_count":727,"cve_count":115,"kev_count":76,"last_cve_update":728},137077,"wildfly_elytron",91,"2025-03-04",{"id":730,"product_name":731,"version_count":732,"cve_count":115,"kev_count":76,"last_cve_update":733},136767,"hibernate_validator",70,"2025-06-03",{"id":735,"product_name":736,"version_count":83,"cve_count":115,"kev_count":76,"last_cve_update":336},136799,"jboss_data_virtualization",{"id":738,"product_name":739,"version_count":102,"cve_count":115,"kev_count":76,"last_cve_update":282},136738,"enterprise_virtualization_hypervisor",{"id":741,"product_name":742,"version_count":320,"cve_count":115,"kev_count":76,"last_cve_update":719},136753,"freeipa",{"id":744,"product_name":745,"version_count":746,"cve_count":115,"kev_count":76,"last_cve_update":747},136741,"etcd",118,"2020-08-06",{"id":749,"product_name":750,"version_count":751,"cve_count":89,"kev_count":76,"last_cve_update":752},136742,"evince",34,"2011-01-07",{"id":754,"product_name":755,"version_count":102,"cve_count":89,"kev_count":76,"last_cve_update":560},136968,"process_automation_manager",{"id":757,"product_name":758,"version_count":107,"cve_count":89,"kev_count":140,"last_cve_update":252},136943,"openshift_virtualization",{"id":760,"product_name":761,"version_count":55,"cve_count":89,"kev_count":76,"last_cve_update":762},136826,"jboss_seam_2_framework","2014-01-23",{"id":764,"product_name":765,"version_count":140,"cve_count":89,"kev_count":140,"last_cve_update":766},137034,"storage_for_public_cloud","2012-10-22",{"id":768,"product_name":769,"version_count":102,"cve_count":89,"kev_count":140,"last_cve_update":770},136727,"enterprise_linux_server_workstation","2023-03-27",{"id":772,"product_name":773,"version_count":107,"cve_count":89,"kev_count":140,"last_cve_update":252},136941,"openshift_serverless",{"id":775,"product_name":776,"version_count":39,"cve_count":89,"kev_count":76,"last_cve_update":777},136829,"jboss_web_framework_kit","2014-07-07",{"id":779,"product_name":780,"version_count":102,"cve_count":89,"kev_count":76,"last_cve_update":336},136830,"jboss_web_server",{"id":782,"product_name":783,"version_count":102,"cve_count":89,"kev_count":76,"last_cve_update":784},136731,"enterprise_linux_virtualization","2018-10-31",{"id":786,"product_name":787,"version_count":107,"cve_count":89,"kev_count":76,"last_cve_update":788},137058,"update_infrastructure","2024-02-05",{"id":790,"product_name":791,"version_count":699,"cve_count":89,"kev_count":76,"last_cve_update":792},136834,"jbpm","2021-06-01",{"id":794,"product_name":795,"version_count":140,"cve_count":89,"kev_count":76,"last_cve_update":336},136629,"codeready_studio",{"id":797,"product_name":798,"version_count":83,"cve_count":89,"kev_count":76,"last_cve_update":799},136837,"kdebase","2003-08-27",{"id":801,"product_name":802,"version_count":76,"cve_count":89,"kev_count":76,"last_cve_update":803},136846,"kexec-tools","2015-05-19",{"id":805,"product_name":806,"version_count":76,"cve_count":89,"kev_count":140,"last_cve_update":807},136926,"openshift_data_science","2024-08-12",{"id":809,"product_name":810,"version_count":140,"cve_count":89,"kev_count":76,"last_cve_update":811},136884,"messaging_realtime_grid","2021-03-04",{"id":813,"product_name":814,"version_count":140,"cve_count":89,"kev_count":76,"last_cve_update":815},136856,"kvm","2012-01-27",{"id":817,"product_name":818,"version_count":107,"cve_count":89,"kev_count":76,"last_cve_update":819},136890,"mobile_application_platform","2021-01-28",{"id":821,"product_name":822,"version_count":107,"cve_count":89,"kev_count":76,"last_cve_update":540},137014,"single_sign_on",{"id":824,"product_name":825,"version_count":132,"cve_count":89,"kev_count":76,"last_cve_update":826},136901,"network_satellite_server","2011-07-27",{"id":828,"product_name":829,"version_count":140,"cve_count":89,"kev_count":76,"last_cve_update":13},136584,"build_of_apache_camel_for_spring_boot",{"id":831,"product_name":832,"version_count":102,"cve_count":89,"kev_count":76,"last_cve_update":833},136708,"enterprise_linux_openstack_platform","2022-09-29",{"id":835,"product_name":836,"version_count":107,"cve_count":89,"kev_count":76,"last_cve_update":837},136700,"enterprise_linux_high_availability","2023-05-17",{"id":839,"product_name":840,"version_count":102,"cve_count":89,"kev_count":76,"last_cve_update":841},136971,"quickstart_cloud_installer","2017-06-13",{"id":843,"product_name":844,"version_count":107,"cve_count":89,"kev_count":76,"last_cve_update":845},137030,"spice-xpi","2011-04-18",{"id":847,"product_name":848,"version_count":140,"cve_count":107,"kev_count":76,"last_cve_update":336},136817,"jboss_fuse_service_works",{"id":850,"product_name":851,"version_count":140,"cve_count":107,"kev_count":140,"last_cve_update":852},136551,"3scale_api_management_platform","2024-10-09",{"id":854,"product_name":855,"version_count":83,"cve_count":107,"kev_count":76,"last_cve_update":856},136559,"amq_broker","2022-08-24",{"id":858,"product_name":859,"version_count":140,"cve_count":107,"kev_count":76,"last_cve_update":627},136561,"amq_online",{"id":861,"product_name":862,"version_count":863,"cve_count":107,"kev_count":76,"last_cve_update":856},136574,"ansible_runner",35,{"id":865,"product_name":866,"version_count":140,"cve_count":107,"kev_count":76,"last_cve_update":13},136585,"build_of_apache_camel_-_hawtio",{"id":868,"product_name":869,"version_count":140,"cve_count":107,"kev_count":76,"last_cve_update":870},136617,"cluster_suite","2010-08-05",{"id":872,"product_name":873,"version_count":69,"cve_count":107,"kev_count":76,"last_cve_update":874},136618,"cman","2009-03-31",{"id":876,"product_name":877,"version_count":140,"cve_count":107,"kev_count":76,"last_cve_update":878},136651,"discovery","2025-01-14",{"id":880,"product_name":881,"version_count":102,"cve_count":107,"kev_count":76,"last_cve_update":882},136658,"drools","2023-09-11",{"id":884,"product_name":885,"version_count":102,"cve_count":107,"kev_count":76,"last_cve_update":610},136674,"enterprise_linux_desktop_workstation",{"id":887,"product_name":888,"version_count":140,"cve_count":107,"kev_count":76,"last_cve_update":889},136687,"enterprise_linux_for_ibm_z_systems_s390x","2023-09-18",{"id":891,"product_name":892,"version_count":102,"cve_count":107,"kev_count":140,"last_cve_update":893},136707,"enterprise_linux_long_life","2016-11-10",{"id":895,"product_name":896,"version_count":76,"cve_count":107,"kev_count":76,"last_cve_update":122},136745,"fast_datapath",{"id":898,"product_name":899,"version_count":55,"cve_count":107,"kev_count":76,"last_cve_update":900},136769,"hornetq","2024-11-04",{"id":902,"product_name":903,"version_count":76,"cve_count":107,"kev_count":140,"last_cve_update":904},136778,"integration_camel_for_spring_boot","2024-02-19",{"id":906,"product_name":907,"version_count":192,"cve_count":107,"kev_count":76,"last_cve_update":908},136782,"interchange","2020-05-15",{"id":910,"product_name":911,"version_count":102,"cve_count":107,"kev_count":76,"last_cve_update":912},136784,"jboss_aerogear","2022-07-01",{"id":914,"product_name":915,"version_count":107,"cve_count":107,"kev_count":76,"last_cve_update":368},136793,"jboss_business_rules_management_system",{"id":917,"product_name":918,"version_count":134,"cve_count":107,"kev_count":76,"last_cve_update":919},136795,"jboss_community_application_server","2019-12-06",{"id":921,"product_name":922,"version_count":76,"cve_count":107,"kev_count":76,"last_cve_update":923},136804,"jboss_enterprise_application_platform_continuous_delivery","2020-07-24",{"id":925,"product_name":926,"version_count":76,"cve_count":107,"kev_count":76,"last_cve_update":639},136806,"jboss_enterprise_application_platform_text-only_advisories",{"id":928,"product_name":929,"version_count":39,"cve_count":107,"kev_count":76,"last_cve_update":930},136838,"kdelibs","2011-03-16",{"id":932,"product_name":933,"version_count":102,"cve_count":107,"kev_count":76,"last_cve_update":934},136842,"kernel","2004-12-06",{"id":936,"product_name":937,"version_count":107,"cve_count":107,"kev_count":76,"last_cve_update":938},136871,"linux_powertools","2001-12-21",{"id":940,"product_name":941,"version_count":140,"cve_count":107,"kev_count":76,"last_cve_update":942},136882,"manageiq_enterprise_virtualization_manager","2019-11-01",{"id":944,"product_name":945,"version_count":102,"cve_count":107,"kev_count":140,"last_cve_update":946},136886,"migration_toolkit_for_applications","2024-01-26",{"id":948,"product_name":949,"version_count":39,"cve_count":107,"kev_count":76,"last_cve_update":950},136891,"mod_cluster","2017-04-12",{"id":952,"product_name":953,"version_count":76,"cve_count":107,"kev_count":140,"last_cve_update":252},136910,"openshift_api_for_data_protection",{"id":955,"product_name":956,"version_count":120,"cve_count":107,"kev_count":76,"last_cve_update":207},136924,"openshift_container_storage",{"id":958,"product_name":959,"version_count":140,"cve_count":107,"kev_count":76,"last_cve_update":252},136925,"openshift_data_foundation",{"id":961,"product_name":962,"version_count":140,"cve_count":107,"kev_count":140,"last_cve_update":252},136930,"openshift_gitops",{"id":964,"product_name":965,"version_count":76,"cve_count":107,"kev_count":76,"last_cve_update":966},136947,"openstack_essex","2019-12-10",{"id":968,"product_name":969,"version_count":115,"cve_count":107,"kev_count":76,"last_cve_update":970},136951,"openstack-mistral","2020-06-15",{"id":972,"product_name":973,"version_count":115,"cve_count":107,"kev_count":76,"last_cve_update":974},136990,"rhevm-reports","2014-05-29",{"id":976,"product_name":977,"version_count":978,"cve_count":107,"kev_count":76,"last_cve_update":979},136999,"rkt",63,"2019-06-03",{"id":981,"product_name":982,"version_count":140,"cve_count":107,"kev_count":140,"last_cve_update":983},137008,"service_interconnect","2024-07-17",{"id":985,"product_name":986,"version_count":134,"cve_count":107,"kev_count":76,"last_cve_update":987},137021,"sos","2014-06-01",{"id":989,"product_name":990,"version_count":140,"cve_count":107,"kev_count":76,"last_cve_update":991},137032,"storage_console","2018-07-19",{"id":993,"product_name":994,"version_count":995,"cve_count":107,"kev_count":76,"last_cve_update":996},137040,"subscription-manager",394,"2023-08-23",{"id":998,"product_name":999,"version_count":107,"cve_count":102,"kev_count":76,"last_cve_update":1000},136637,"cygwin","2008-07-28",{"id":1002,"product_name":1003,"version_count":140,"cve_count":102,"kev_count":76,"last_cve_update":1004},137071,"virtualization_server","2008-05-14",{"id":1006,"product_name":1007,"version_count":138,"cve_count":102,"kev_count":76,"last_cve_update":1008},136747,"fedora_8","2008-07-09",{"id":1010,"product_name":1011,"version_count":140,"cve_count":102,"kev_count":76,"last_cve_update":1012},136634,"coreos-installer","2022-08-23",{"id":1014,"product_name":1015,"version_count":107,"cve_count":102,"kev_count":76,"last_cve_update":358},136797,"jboss_core_services_httpd",{"id":1017,"product_name":1018,"version_count":107,"cve_count":102,"kev_count":76,"last_cve_update":1019},136885,"migration_toolkit","2022-02-18",{"id":1021,"product_name":1022,"version_count":140,"cve_count":102,"kev_count":76,"last_cve_update":1023},136750,"fedora_directory_server","2008-05-12",{"id":1025,"product_name":1026,"version_count":60,"cve_count":102,"kev_count":76,"last_cve_update":1027},136768,"hivex","2021-12-23",{"id":1029,"product_name":1030,"version_count":76,"cve_count":102,"kev_count":76,"last_cve_update":1031},136888,"migration_toolkit_for_runtimes","2023-05-26",{"id":1033,"product_name":1034,"version_count":76,"cve_count":102,"kev_count":140,"last_cve_update":252},136928,"openshift_dev_spaces",{"id":1036,"product_name":1037,"version_count":140,"cve_count":102,"kev_count":140,"last_cve_update":1038},136929,"openshift_distributed_tracing","2024-06-05",{"id":1040,"product_name":1041,"version_count":102,"cve_count":102,"kev_count":76,"last_cve_update":1042},136761,"gluster_storage_management_console","2016-06-07",{"id":1044,"product_name":1045,"version_count":140,"cve_count":102,"kev_count":76,"last_cve_update":1046},136858,"lha","2004-08-18",{"id":1048,"product_name":1049,"version_count":140,"cve_count":102,"kev_count":76,"last_cve_update":1050},136664,"enterprise_linux_advanced_virtualization_eus","2022-03-23",{"id":1052,"product_name":1053,"version_count":102,"cve_count":102,"kev_count":76,"last_cve_update":1054},136860,"libpng","2012-08-13",{"id":1056,"product_name":1057,"version_count":102,"cve_count":102,"kev_count":76,"last_cve_update":1058},136794,"jboss_communications_platform","2014-02-10",{"id":1060,"product_name":1061,"version_count":140,"cve_count":102,"kev_count":76,"last_cve_update":1062},137045,"sysstat","2004-04-15",{"id":1064,"product_name":1065,"version_count":140,"cve_count":102,"kev_count":76,"last_cve_update":358},137067,"virtualization_for_ibm_power_little_endian",{"id":1067,"product_name":1068,"version_count":420,"cve_count":102,"kev_count":76,"last_cve_update":1069},137054,"tuned","2019-11-20",{"id":1071,"product_name":1072,"version_count":76,"cve_count":102,"kev_count":140,"last_cve_update":252},136938,"openshift_pipelines",{"id":1074,"product_name":1075,"version_count":83,"cve_count":102,"kev_count":76,"last_cve_update":1076},136864,"libuser","2015-08-11",{"id":1078,"product_name":1079,"version_count":140,"cve_count":102,"kev_count":76,"last_cve_update":784},136737,"enterprise_virtualization_host",{"id":1081,"product_name":1082,"version_count":107,"cve_count":102,"kev_count":76,"last_cve_update":1083},136614,"cloudforms_cloud_engine","2013-03-12",{"id":1085,"product_name":1086,"version_count":140,"cve_count":102,"kev_count":76,"last_cve_update":1087},136613,"cloudforms_3.1_management_engine","2015-01-16",{"id":1089,"product_name":1090,"version_count":76,"cve_count":102,"kev_count":76,"last_cve_update":599},136611,"cloudforms_3.0.5_management_engine",{"id":1092,"product_name":1093,"version_count":140,"cve_count":102,"kev_count":76,"last_cve_update":599},136610,"cloudforms_3.0.4_management_engine",{"id":1095,"product_name":1096,"version_count":140,"cve_count":102,"kev_count":76,"last_cve_update":599},136609,"cloudforms_3.0.3_management_engine",{"id":1098,"product_name":1099,"version_count":69,"cve_count":102,"kev_count":76,"last_cve_update":1100},136898,"network_proxy","2014-04-15",{"id":1102,"product_name":1103,"version_count":107,"cve_count":102,"kev_count":76,"last_cve_update":837},136701,"enterprise_linux_high_availability_eus",{"id":1105,"product_name":1106,"version_count":76,"cve_count":102,"kev_count":76,"last_cve_update":1107},136948,"openstack_folsom","2013-04-10",{"id":1109,"product_name":1110,"version_count":27,"cve_count":102,"kev_count":76,"last_cve_update":1111},137049,"tectonic","2019-09-24",{"id":1113,"product_name":1114,"version_count":140,"cve_count":102,"kev_count":76,"last_cve_update":599},136608,"cloudforms_3.0.2_management_engine",{"id":1116,"product_name":1117,"version_count":140,"cve_count":102,"kev_count":76,"last_cve_update":1118},136646,"desktop_workstation","2012-07-18",{"id":1120,"product_name":1121,"version_count":140,"cve_count":102,"kev_count":76,"last_cve_update":599},136607,"cloudforms_3.0.1_management_engine",{"id":1123,"product_name":1124,"version_count":76,"cve_count":102,"kev_count":76,"last_cve_update":1125},136953,"openstack-rdo","2021-06-09",{"id":1127,"product_name":1128,"version_count":140,"cve_count":102,"kev_count":76,"last_cve_update":639},136562,"a-mq_streams",{"id":1130,"product_name":1131,"version_count":140,"cve_count":102,"kev_count":76,"last_cve_update":1132},136720,"enterprise_linux_server_from_rhui_6","2017-08-09",{"id":1134,"product_name":1135,"version_count":76,"cve_count":102,"kev_count":76,"last_cve_update":1136},136801,"jboss_drools","2018-09-10",{"id":1138,"product_name":1139,"version_count":1140,"cve_count":102,"kev_count":76,"last_cve_update":1141},136957,"ovirt-node",82,"2022-03-25",{"id":1143,"product_name":1144,"version_count":335,"cve_count":102,"kev_count":76,"last_cve_update":588},136905,"noobaa-operator",{"id":1146,"product_name":1147,"version_count":102,"cve_count":102,"kev_count":76,"last_cve_update":1148},136959,"packstack","2014-12-02",{"id":1150,"product_name":1151,"version_count":107,"cve_count":102,"kev_count":76,"last_cve_update":588},136824,"jboss-remoting",{"id":1153,"product_name":1154,"version_count":107,"cve_count":102,"kev_count":76,"last_cve_update":1155},136825,"jboss_remoting","2010-12-30",{"id":1157,"product_name":1158,"version_count":140,"cve_count":102,"kev_count":76,"last_cve_update":207},136567,"ansible_automation_platform_early_access",{"id":1160,"product_name":1161,"version_count":140,"cve_count":102,"kev_count":76,"last_cve_update":1162},136844,"kernel-rt","2017-09-19",{"id":1164,"product_name":1165,"version_count":107,"cve_count":102,"kev_count":76,"last_cve_update":1166},137044,"sysreport","2005-10-07",{"id":1168,"product_name":1169,"version_count":140,"cve_count":102,"kev_count":76,"last_cve_update":1170},136688,"enterprise_linux_for_ibm_z_systems_\\(structure_a\\)","2019-11-25",{"id":1172,"product_name":1173,"version_count":102,"cve_count":102,"kev_count":76,"last_cve_update":1174},137038,"stronghold","2009-04-21",{"id":1176,"product_name":1177,"version_count":107,"cve_count":102,"kev_count":76,"last_cve_update":588},136827,"jboss_soa_platform",{"id":1179,"product_name":1180,"version_count":76,"cve_count":102,"kev_count":140,"last_cve_update":252},136602,"cert-manager_operator_for_red_hat_openshift",{"id":1182,"product_name":1183,"version_count":140,"cve_count":102,"kev_count":76,"last_cve_update":1184},136969,"qspice","2010-08-24",{"id":1186,"product_name":1187,"version_count":140,"cve_count":102,"kev_count":76,"last_cve_update":1188},137063,"virtual_desktop_server_manager","2019-11-13",{"id":1190,"product_name":1191,"version_count":140,"cve_count":102,"kev_count":76,"last_cve_update":1192},136786,"jboss_amq_clients","2020-01-29",{"id":1194,"product_name":1195,"version_count":76,"cve_count":102,"kev_count":76,"last_cve_update":1196},136877,"luci","2011-02-03",{"id":1198,"product_name":1199,"version_count":1200,"cve_count":102,"kev_count":76,"last_cve_update":1201},136802,"jboss-ejb-client",99,"2021-05-13",{"id":1203,"product_name":1204,"version_count":89,"cve_count":102,"kev_count":76,"last_cve_update":1205},136974,"redhat_package_manager","2002-12-31",{"id":1207,"product_name":1208,"version_count":107,"cve_count":102,"kev_count":140,"last_cve_update":1209},136715,"enterprise_linux_server_eus_from_rhui","2015-08-12",{"id":1211,"product_name":1212,"version_count":76,"cve_count":102,"kev_count":102,"last_cve_update":1213},136814,"jboss_enterprise_web_server_text-only_advisories","2017-10-04",{"id":1215,"product_name":1216,"version_count":140,"cve_count":102,"kev_count":76,"last_cve_update":1217},136772,"icedtea7","2016-04-21",{"id":1219,"product_name":1220,"version_count":140,"cve_count":102,"kev_count":76,"last_cve_update":1221},137037,"storage_server","2013-10-04",{"id":1223,"product_name":1224,"version_count":76,"cve_count":102,"kev_count":76,"last_cve_update":1042},137036,"storage_native_client",{"id":1226,"product_name":1227,"version_count":515,"cve_count":102,"kev_count":76,"last_cve_update":1228},136569,"ansible_collection","2023-10-04",{"id":1230,"product_name":1231,"version_count":134,"cve_count":102,"kev_count":76,"last_cve_update":639},136576,"apicast",{"id":1233,"product_name":1234,"version_count":1235,"cve_count":102,"kev_count":76,"last_cve_update":1236},136583,"bodhi",119,"2022-10-07",{"id":1238,"product_name":1239,"version_count":140,"cve_count":102,"kev_count":140,"last_cve_update":397},136587,"build_of_optaplanner",{"id":1241,"product_name":1242,"version_count":1243,"cve_count":102,"kev_count":76,"last_cve_update":358},137082,"xnio",79,{"id":1245,"product_name":1246,"version_count":140,"cve_count":102,"kev_count":76,"last_cve_update":1247},137003,"satellite_5_managed_db","2014-02-14",{"id":1249,"product_name":1250,"version_count":76,"cve_count":102,"kev_count":76,"last_cve_update":1251},136993,"rhn-client-tools","2018-04-12",{"id":1253,"product_name":1254,"version_count":76,"cve_count":140,"kev_count":140,"last_cve_update":397},136887,"migration_toolkit_for_containers",{"id":1256,"product_name":1257,"version_count":76,"cve_count":140,"kev_count":140,"last_cve_update":397},136889,"migration_toolkit_for_virtualization",{"id":1259,"product_name":1260,"version_count":140,"cve_count":140,"kev_count":76,"last_cve_update":1261},136652,"docbook_stylesheets","2002-05-29",{"id":1263,"product_name":1264,"version_count":301,"cve_count":140,"kev_count":76,"last_cve_update":1008},137073,"vsftpd",{"id":1266,"product_name":1267,"version_count":83,"cve_count":140,"kev_count":76,"last_cve_update":1268},136892,"modulemd","2019-01-10",{"id":1270,"product_name":1271,"version_count":140,"cve_count":140,"kev_count":76,"last_cve_update":1272},136893,"mrg_management_console","2019-12-30",{"id":1274,"product_name":1275,"version_count":76,"cve_count":140,"kev_count":76,"last_cve_update":1276},136649,"device-mapper-multipath","2023-03-29",{"id":1278,"product_name":1279,"version_count":89,"cve_count":140,"kev_count":76,"last_cve_update":1280},136895,"networkmanager","2017-07-17",{"id":1282,"product_name":1283,"version_count":140,"cve_count":140,"kev_count":76,"last_cve_update":1284},136896,"network_observability","2023-09-15",{"id":1286,"product_name":1287,"version_count":76,"cve_count":140,"kev_count":140,"last_cve_update":397},136897,"network_observability_operator",{"id":1289,"product_name":1290,"version_count":140,"cve_count":140,"kev_count":76,"last_cve_update":1291},136899,"network_satelite_server","2007-08-30",{"id":1293,"product_name":1294,"version_count":140,"cve_count":140,"kev_count":76,"last_cve_update":1295},136902,"nfs_utils","2008-08-01",{"id":1297,"product_name":1298,"version_count":76,"cve_count":140,"kev_count":140,"last_cve_update":397},136903,"node_healthcheck_operator",{"id":1300,"product_name":1301,"version_count":76,"cve_count":140,"kev_count":140,"last_cve_update":397},136904,"node_maintenance_operator",{"id":1303,"product_name":1304,"version_count":1305,"cve_count":140,"kev_count":76,"last_cve_update":1306},136906,"oddjob",47,"2020-05-27",{"id":1308,"product_name":1309,"version_count":140,"cve_count":140,"kev_count":76,"last_cve_update":1310},136907,"open_iscsi","2007-06-14",{"id":1312,"product_name":1313,"version_count":76,"cve_count":140,"kev_count":76,"last_cve_update":807},136909,"openshift_ai",{"id":1315,"product_name":1316,"version_count":76,"cve_count":140,"kev_count":140,"last_cve_update":397},137074,"web_terminal",{"id":1318,"product_name":1319,"version_count":140,"cve_count":140,"kev_count":76,"last_cve_update":63},136911,"openshift_api_management",{"id":1321,"product_name":1322,"version_count":107,"cve_count":140,"kev_count":76,"last_cve_update":1323},136641,"ddskk-xemacs","2003-08-18",{"id":1325,"product_name":1326,"version_count":76,"cve_count":140,"kev_count":76,"last_cve_update":1327},136913,"openshift_application_runtimes_text-only_advisories","2020-01-27",{"id":1329,"product_name":1330,"version_count":87,"cve_count":140,"kev_count":76,"last_cve_update":1331},136914,"openshift_assisted_installer","2023-03-24",{"id":1333,"product_name":1334,"version_count":140,"cve_count":140,"kev_count":76,"last_cve_update":1335},136915,"openshift_builder","2021-03-16",{"id":1337,"product_name":1338,"version_count":115,"cve_count":140,"kev_count":76,"last_cve_update":1339},136639,"dashbuilder","2016-08-05",{"id":1341,"product_name":1342,"version_count":76,"cve_count":140,"kev_count":140,"last_cve_update":397},136917,"openshift_container_platform_assisted_installer",{"id":1344,"product_name":1345,"version_count":115,"cve_count":140,"kev_count":76,"last_cve_update":1323},136638,"daredevil_skk",{"id":1347,"product_name":1348,"version_count":140,"cve_count":140,"kev_count":140,"last_cve_update":397},136636,"cryostat",{"id":1350,"product_name":1351,"version_count":76,"cve_count":140,"kev_count":140,"last_cve_update":397},136635,"cost_management",{"id":1353,"product_name":1354,"version_count":140,"cve_count":140,"kev_count":76,"last_cve_update":1355},136633,"container_development_kit","2019-02-11",{"id":1357,"product_name":1358,"version_count":76,"cve_count":140,"kev_count":76,"last_cve_update":1083},136556,"aeolus_conductor",{"id":1360,"product_name":1361,"version_count":140,"cve_count":140,"kev_count":76,"last_cve_update":610},136555,"advanced_workstation_for_the_itanium_processor",{"id":1363,"product_name":1364,"version_count":120,"cve_count":140,"kev_count":76,"last_cve_update":548},136631,"community_network_collection",{"id":1366,"product_name":1367,"version_count":44,"cve_count":140,"kev_count":76,"last_cve_update":548},136630,"community_general_collection",{"id":1369,"product_name":1370,"version_count":140,"cve_count":140,"kev_count":76,"last_cve_update":1371},136552,"adminutil","2008-09-12",{"id":1373,"product_name":1374,"version_count":55,"cve_count":140,"kev_count":76,"last_cve_update":1375},136931,"openshift_installer","2021-02-23",{"id":1377,"product_name":1378,"version_count":1379,"cve_count":140,"kev_count":76,"last_cve_update":1380},136932,"openshift_logging",62,"2023-08-21",{"id":1382,"product_name":1383,"version_count":140,"cve_count":140,"kev_count":76,"last_cve_update":1384},136933,"openshift_machine-config-operator","2022-04-01",{"id":1386,"product_name":1387,"version_count":74,"cve_count":140,"kev_count":76,"last_cve_update":1388},136616,"cluster_project","2009-03-30",{"id":1390,"product_name":1391,"version_count":76,"cve_count":140,"kev_count":76,"last_cve_update":1392},136936,"openshift-origin-node-util","2022-06-30",{"id":1394,"product_name":1395,"version_count":102,"cve_count":140,"kev_count":76,"last_cve_update":1396},136937,"openshift_osin","2022-12-28",{"id":1398,"product_name":1399,"version_count":76,"cve_count":140,"kev_count":140,"last_cve_update":397},136939,"openshift_sandboxed_containers",{"id":1401,"product_name":1402,"version_count":76,"cve_count":140,"kev_count":140,"last_cve_update":397},136940,"openshift_secondary_scheduler_operator",{"id":1404,"product_name":1405,"version_count":115,"cve_count":140,"kev_count":76,"last_cve_update":1406},136946,"openstack-cinder","2020-06-10",{"id":1408,"product_name":1409,"version_count":140,"cve_count":140,"kev_count":76,"last_cve_update":1410},137078,"wildfly_openssl","2020-10-06",{"id":1412,"product_name":1413,"version_count":76,"cve_count":140,"kev_count":76,"last_cve_update":487},136949,"openstack_foreman",{"id":1415,"product_name":1416,"version_count":89,"cve_count":140,"kev_count":76,"last_cve_update":799},137079,"wu_ftpd",{"id":1418,"product_name":1419,"version_count":76,"cve_count":140,"kev_count":76,"last_cve_update":220},136954,"openstack-selinux",{"id":1421,"product_name":1422,"version_count":140,"cve_count":140,"kev_count":76,"last_cve_update":1423},136955,"origin-aggregated-logging","2022-04-11",{"id":1425,"product_name":1426,"version_count":19,"cve_count":140,"kev_count":76,"last_cve_update":316},136605,"clair",{"id":1428,"product_name":1429,"version_count":76,"cve_count":140,"kev_count":76,"last_cve_update":1430},136958,"package_manager","2018-07-24",{"id":1432,"product_name":1433,"version_count":120,"cve_count":140,"kev_count":76,"last_cve_update":548},136604,"cisco_nx-os_collection",{"id":1435,"product_name":1436,"version_count":107,"cve_count":140,"kev_count":76,"last_cve_update":1437},136961,"pam_smb","2003-10-20",{"id":1439,"product_name":1440,"version_count":1441,"cve_count":140,"kev_count":76,"last_cve_update":1442},136962,"policycoreutils",258,"2011-02-24",{"id":1444,"product_name":1445,"version_count":140,"cve_count":140,"kev_count":76,"last_cve_update":1446},136963,"policykit","2011-05-31",{"id":1448,"product_name":1449,"version_count":140,"cve_count":140,"kev_count":76,"last_cve_update":1450},136965,"pre-execution_environment","2002-10-04",{"id":1452,"product_name":1453,"version_count":1454,"cve_count":140,"kev_count":76,"last_cve_update":1455},136603,"cfme-gemset",41,"2019-06-14",{"id":1457,"product_name":1458,"version_count":102,"cve_count":140,"kev_count":140,"last_cve_update":397},136601,"certification_for_red_hat_enterprise_linux",{"id":1460,"product_name":1461,"version_count":107,"cve_count":140,"kev_count":76,"last_cve_update":1462},136598,"certificate_server","2007-11-06",{"id":1464,"product_name":1465,"version_count":76,"cve_count":140,"kev_count":76,"last_cve_update":1466},136972,"red_hat_developer_hub","2024-01-04",{"id":1468,"product_name":1469,"version_count":76,"cve_count":140,"kev_count":76,"last_cve_update":1470},136973,"redhat_directory_server","2020-01-09",{"id":1472,"product_name":1473,"version_count":76,"cve_count":140,"kev_count":76,"last_cve_update":1474},136975,"redhat-upgrade-tool","2019-11-22",{"id":1476,"product_name":1477,"version_count":140,"cve_count":140,"kev_count":76,"last_cve_update":207},136595,"ceph_storage_for_power",{"id":1479,"product_name":1480,"version_count":115,"cve_count":140,"kev_count":76,"last_cve_update":1388},136977,"rgmanager",{"id":1482,"product_name":1483,"version_count":76,"cve_count":140,"kev_count":76,"last_cve_update":1484},136787,"jboss_amq_clients_2","2019-04-23",{"id":1486,"product_name":1487,"version_count":76,"cve_count":140,"kev_count":140,"last_cve_update":397},136789,"jboss_a-mq_streams",{"id":1489,"product_name":1490,"version_count":102,"cve_count":140,"kev_count":76,"last_cve_update":1491},136749,"fedora_coreos","2022-11-03",{"id":1493,"product_name":1494,"version_count":69,"cve_count":140,"kev_count":76,"last_cve_update":1495},136744,"fabric8-maven","2020-10-22",{"id":1497,"product_name":1498,"version_count":76,"cve_count":140,"kev_count":76,"last_cve_update":1499},137064,"virtual_desktop_service_manager","2014-10-22",{"id":1501,"product_name":1502,"version_count":46,"cve_count":140,"kev_count":76,"last_cve_update":856},136743,"fabric8-kubernetes",{"id":1504,"product_name":1505,"version_count":76,"cve_count":140,"kev_count":76,"last_cve_update":1506},136740,"enterprise_virtualization_server","2017-06-19",{"id":1508,"product_name":1509,"version_count":89,"cve_count":140,"kev_count":76,"last_cve_update":1510},136800,"jboss_data_virtualization_\\&_services","2018-07-27",{"id":1512,"product_name":1513,"version_count":102,"cve_count":140,"kev_count":76,"last_cve_update":1514},136732,"enterprise_linux_worksation","2017-10-19",{"id":1516,"product_name":1517,"version_count":140,"cve_count":140,"kev_count":76,"last_cve_update":1518},137066,"virtualization_eus","2019-11-14",{"id":1520,"product_name":1521,"version_count":140,"cve_count":140,"kev_count":76,"last_cve_update":1522},136728,"enterprise_linux_supplementary","2015-04-14",{"id":1524,"product_name":1525,"version_count":140,"cve_count":140,"kev_count":76,"last_cve_update":1506},136721,"enterprise_linux_server_long_life",{"id":1527,"product_name":1528,"version_count":107,"cve_count":140,"kev_count":76,"last_cve_update":1529},136808,"jboss_enterprise_data_services_platform","2012-11-23",{"id":1531,"product_name":1532,"version_count":132,"cve_count":140,"kev_count":76,"last_cve_update":1533},136810,"jboss_enterprise_service_bus","2010-08-10",{"id":1535,"product_name":1536,"version_count":140,"cve_count":140,"kev_count":76,"last_cve_update":1537},136716,"enterprise_linux_server_for_ibm_z_systems","2024-01-10",{"id":1539,"product_name":1540,"version_count":102,"cve_count":140,"kev_count":76,"last_cve_update":511},136711,"enterprise_linux_resilient_storage_eus",{"id":1542,"product_name":1543,"version_count":140,"cve_count":140,"kev_count":76,"last_cve_update":1544},136816,"jboss_fuse_esb_enterprise","2013-08-19",{"id":1546,"product_name":1547,"version_count":76,"cve_count":140,"kev_count":76,"last_cve_update":1548},136709,"enterprise_linux__optional_productivity_applications","2012-06-21",{"id":1550,"product_name":1551,"version_count":76,"cve_count":140,"kev_count":76,"last_cve_update":966},136818,"jboss_keycloak",{"id":1553,"product_name":1554,"version_count":102,"cve_count":140,"kev_count":76,"last_cve_update":1544},136706,"enterprise_linux_load_balancer",{"id":1556,"product_name":1557,"version_count":102,"cve_count":140,"kev_count":76,"last_cve_update":536},136696,"enterprise_linux_for_real_time_for_nfv_eus",{"id":1559,"product_name":1560,"version_count":140,"cve_count":140,"kev_count":76,"last_cve_update":1561},136822,"jboss_overlord_run_time_governance","2014-04-22",{"id":1563,"product_name":1564,"version_count":102,"cve_count":140,"kev_count":76,"last_cve_update":536},136694,"enterprise_linux_for_real_time_eus",{"id":1566,"product_name":1567,"version_count":140,"cve_count":140,"kev_count":76,"last_cve_update":1568},136828,"jbossweb","2020-09-09",{"id":1570,"product_name":1571,"version_count":76,"cve_count":140,"kev_count":76,"last_cve_update":1572},136684,"enterprise_linux_for_ibm_z_systems_8_s390x","2019-09-04",{"id":1574,"product_name":1575,"version_count":102,"cve_count":140,"kev_count":140,"last_cve_update":1576},136682,"enterprise_linux_for_arm64_eus","2023-03-06",{"id":1578,"product_name":1579,"version_count":76,"cve_count":140,"kev_count":76,"last_cve_update":368},136831,"jboss_web_services",{"id":1581,"product_name":1582,"version_count":102,"cve_count":140,"kev_count":76,"last_cve_update":1583},136832,"jboss_weld","2015-02-13",{"id":1585,"product_name":1586,"version_count":140,"cve_count":140,"kev_count":140,"last_cve_update":1576},136680,"enterprise_linux_for_arm64",{"id":1588,"product_name":1589,"version_count":107,"cve_count":140,"kev_count":76,"last_cve_update":1590},136835,"jbpm-designer","2015-02-20",{"id":1592,"product_name":1593,"version_count":140,"cve_count":140,"kev_count":76,"last_cve_update":1594},136836,"jgroups","2016-06-30",{"id":1596,"product_name":1597,"version_count":140,"cve_count":140,"kev_count":76,"last_cve_update":1598},136671,"enterprise_linux_dekstop","2018-12-12",{"id":1600,"product_name":1601,"version_count":76,"cve_count":140,"kev_count":76,"last_cve_update":1335},136560,"a-mq_online",{"id":1603,"product_name":1604,"version_count":115,"cve_count":140,"kev_count":76,"last_cve_update":799},136839,"kdelibs_devel",{"id":1606,"product_name":1607,"version_count":102,"cve_count":140,"kev_count":76,"last_cve_update":799},136840,"kdelibs_sound",{"id":1609,"product_name":1610,"version_count":102,"cve_count":140,"kev_count":76,"last_cve_update":799},136841,"kdelibs_sound_devel",{"id":1612,"product_name":1613,"version_count":140,"cve_count":140,"kev_count":76,"last_cve_update":536},137069,"virtualization_host_eus",{"id":1615,"product_name":1616,"version_count":140,"cve_count":140,"kev_count":76,"last_cve_update":1617},136843,"kernel_doc","2004-03-03",{"id":1619,"product_name":1620,"version_count":140,"cve_count":140,"kev_count":76,"last_cve_update":1617},136845,"kernel_source",{"id":1622,"product_name":1623,"version_count":140,"cve_count":140,"kev_count":76,"last_cve_update":1624},136670,"enterprise_linux_computer_node","2021-11-23",{"id":1626,"product_name":1627,"version_count":76,"cve_count":140,"kev_count":76,"last_cve_update":770},136848,"keycloak_node.js_adapter",{"id":1629,"product_name":1630,"version_count":107,"cve_count":140,"kev_count":76,"last_cve_update":1631},136849,"keycloak_operator","2020-03-02",{"id":1633,"product_name":1634,"version_count":140,"cve_count":140,"kev_count":76,"last_cve_update":1635},136850,"kie-server","2019-05-15",{"id":1637,"product_name":1638,"version_count":102,"cve_count":140,"kev_count":76,"last_cve_update":1590},136851,"kie_workbench",{"id":1640,"product_name":1641,"version_count":76,"cve_count":140,"kev_count":76,"last_cve_update":188},136853,"kroxylicious",{"id":1643,"product_name":1644,"version_count":1645,"cve_count":140,"kev_count":76,"last_cve_update":1141},136854,"kubeclient",69,{"id":1647,"product_name":1648,"version_count":274,"cve_count":140,"kev_count":76,"last_cve_update":1335},136855,"kubernetes-client",{"id":1650,"product_name":1651,"version_count":1652,"cve_count":140,"kev_count":76,"last_cve_update":1653},136861,"librepo",52,"2020-08-30",{"id":1655,"product_name":1656,"version_count":335,"cve_count":140,"kev_count":76,"last_cve_update":1657},136862,"libreport","2015-12-07",{"id":1659,"product_name":1660,"version_count":140,"cve_count":140,"kev_count":76,"last_cve_update":1371},136662,"enterprise_ipa",{"id":1662,"product_name":1663,"version_count":100,"cve_count":140,"kev_count":76,"last_cve_update":1664},136661,"enmasse","2020-08-03",{"id":1666,"product_name":1667,"version_count":140,"cve_count":140,"kev_count":76,"last_cve_update":1668},136659,"dtach","2012-07-03",{"id":1670,"product_name":1671,"version_count":76,"cve_count":140,"kev_count":76,"last_cve_update":1672},136868,"linux_as3","2008-04-07",{"id":1674,"product_name":1675,"version_count":76,"cve_count":140,"kev_count":76,"last_cve_update":1672},136869,"linux_as4",{"id":1677,"product_name":1678,"version_count":140,"cve_count":140,"kev_count":76,"last_cve_update":1679},136656,"_dogtag_certificate_system","2009-01-30",{"id":1681,"product_name":1682,"version_count":76,"cve_count":140,"kev_count":76,"last_cve_update":1683},136557,"ai_inference_server","2025-07-01",{"id":1685,"product_name":1686,"version_count":69,"cve_count":140,"kev_count":76,"last_cve_update":548},136655,"docker_community_collection",{"id":1688,"product_name":1689,"version_count":140,"cve_count":140,"kev_count":76,"last_cve_update":1690},136654,"docker","2015-04-06",{"id":1692,"product_name":1693,"version_count":1694,"cve_count":140,"kev_count":76,"last_cve_update":1695},136874,"livecd-tools",112,"2013-05-29",{"id":1697,"product_name":1698,"version_count":76,"cve_count":140,"kev_count":140,"last_cve_update":397},136875,"logging_subsystem_for_red_hat_openshift",{"id":1700,"product_name":1701,"version_count":1702,"cve_count":140,"kev_count":76,"last_cve_update":1375},136876,"louketo_proxy",53,{"id":1704,"product_name":1705,"version_count":89,"cve_count":140,"kev_count":76,"last_cve_update":1706},136878,"lv","2003-06-09",{"id":1708,"product_name":1709,"version_count":1710,"cve_count":140,"kev_count":76,"last_cve_update":1711},136879,"lvm2",113,"2020-02-14",{"id":1713,"product_name":1714,"version_count":76,"cve_count":140,"kev_count":76,"last_cve_update":220},136880,"machine-config-operator",{"id":1716,"product_name":1717,"version_count":76,"cve_count":140,"kev_count":140,"last_cve_update":397},136881,"machine_deletion_remediation_operator",{"id":1719,"product_name":1720,"version_count":140,"cve_count":140,"kev_count":76,"last_cve_update":1721},136883,"mcstrans","2007-11-10",{"id":1723,"product_name":1724,"version_count":102,"cve_count":140,"kev_count":76,"last_cve_update":1261},136653,"docbook_utils",{"id":1726,"product_name":1727,"version_count":76,"cve_count":140,"kev_count":76,"last_cve_update":1019},137072,"vscode-xml",{"id":1729,"product_name":1730,"version_count":76,"cve_count":140,"kev_count":140,"last_cve_update":397},137042,"support_for_spring_boot",{"id":1732,"product_name":1733,"version_count":1734,"cve_count":140,"kev_count":76,"last_cve_update":1735},137043,"syndesis",117,"2019-11-08",{"id":1737,"product_name":1738,"version_count":76,"cve_count":140,"kev_count":76,"last_cve_update":1739},137046,"system-config-firewall","2011-07-21",{"id":1741,"product_name":1742,"version_count":1743,"cve_count":140,"kev_count":76,"last_cve_update":1744},137047,"system-config-printer",167,"2011-08-31",{"id":1746,"product_name":1747,"version_count":107,"cve_count":140,"kev_count":76,"last_cve_update":1748},137050,"template_service_broker_operator","2020-03-19",{"id":1750,"product_name":1751,"version_count":140,"cve_count":140,"kev_count":76,"last_cve_update":1752},137051,"thermostat","2015-06-08",{"id":1754,"product_name":1755,"version_count":102,"cve_count":140,"kev_count":76,"last_cve_update":1756},137053,"tmpwatch","2000-11-14",{"id":1758,"product_name":1759,"version_count":89,"cve_count":140,"kev_count":76,"last_cve_update":1590},137055,"uberfire",{"id":1761,"product_name":1762,"version_count":335,"cve_count":140,"kev_count":76,"last_cve_update":1228},136565,"ansible_automation_controller",{"id":1764,"product_name":1765,"version_count":102,"cve_count":140,"kev_count":76,"last_cve_update":799},137057,"up2date",{"id":1767,"product_name":1768,"version_count":102,"cve_count":140,"kev_count":76,"last_cve_update":799},136563,"analog_real-time_synthesizer",{"id":1770,"product_name":1771,"version_count":76,"cve_count":140,"kev_count":76,"last_cve_update":1188},137059,"vdsclient",{"id":1773,"product_name":1774,"version_count":140,"cve_count":140,"kev_count":76,"last_cve_update":1042},136762,"gluster_storage_server",{"id":1776,"product_name":1777,"version_count":113,"cve_count":140,"kev_count":76,"last_cve_update":548},136764,"google_cloud_platform_ansible_collection",{"id":1779,"product_name":1780,"version_count":76,"cve_count":140,"kev_count":76,"last_cve_update":878},136765,"hal_management_console",{"id":1782,"product_name":1783,"version_count":62,"cve_count":140,"kev_count":76,"last_cve_update":1784},136766,"hawtjni","2013-08-28",{"id":1786,"product_name":1787,"version_count":1788,"cve_count":140,"kev_count":76,"last_cve_update":784},136759,"gluster_file_system",147,{"id":1790,"product_name":1791,"version_count":140,"cve_count":140,"kev_count":76,"last_cve_update":1792},137060,"virt-bootstrap","2019-07-05",{"id":1794,"product_name":1795,"version_count":140,"cve_count":140,"kev_count":76,"last_cve_update":1796},136758,"gluster-block","2020-11-24",{"id":1798,"product_name":1799,"version_count":115,"cve_count":140,"kev_count":76,"last_cve_update":1388},136757,"gfs2-utils",{"id":1801,"product_name":1802,"version_count":140,"cve_count":140,"kev_count":76,"last_cve_update":1062},136756,"gdk_pixbuf",{"id":1804,"product_name":1805,"version_count":158,"cve_count":140,"kev_count":76,"last_cve_update":1806},136774,"ignition","2022-05-17",{"id":1808,"product_name":1809,"version_count":140,"cve_count":140,"kev_count":76,"last_cve_update":1810},136775,"initscripts","2008-09-29",{"id":1812,"product_name":1813,"version_count":128,"cve_count":140,"kev_count":76,"last_cve_update":1814},136776,"insights-client","2023-11-01",{"id":1816,"product_name":1817,"version_count":76,"cve_count":140,"kev_count":76,"last_cve_update":1818},136777,"integration","2022-05-24",{"id":1820,"product_name":1821,"version_count":76,"cve_count":140,"kev_count":76,"last_cve_update":1822},137061,"virtio-win","2017-06-26",{"id":1824,"product_name":1825,"version_count":140,"cve_count":140,"kev_count":76,"last_cve_update":1826},136754,"frysk","2019-11-07",{"id":1828,"product_name":1829,"version_count":76,"cve_count":140,"kev_count":140,"last_cve_update":397},136752,"fence_agents_remediation_operator",{"id":1831,"product_name":1832,"version_count":76,"cve_count":140,"kev_count":76,"last_cve_update":1833},136751,"feedhenry_enterprise_mobile_application_platform","2017-09-20",{"id":1835,"product_name":1836,"version_count":140,"cve_count":140,"kev_count":76,"last_cve_update":1837},137062,"virt-manager","2019-07-03",{"id":1839,"product_name":1840,"version_count":140,"cve_count":140,"kev_count":76,"last_cve_update":35},136783,"in-vehicle_operating_system",{"id":1842,"product_name":1843,"version_count":76,"cve_count":140,"kev_count":76,"last_cve_update":336},136788,"jboss_a-mq_streaming",{"id":1845,"product_name":1846,"version_count":76,"cve_count":140,"kev_count":76,"last_cve_update":1847},136989,"rhevm-dwh","2014-05-30",{"id":1849,"product_name":1850,"version_count":140,"cve_count":140,"kev_count":76,"last_cve_update":1205},136991,"rhmask",{"id":1852,"product_name":1853,"version_count":102,"cve_count":140,"kev_count":76,"last_cve_update":766},136992,"rhncfg",{"id":1855,"product_name":1856,"version_count":76,"cve_count":140,"kev_count":76,"last_cve_update":1857},136994,"rhnsd","2017-09-13",{"id":1859,"product_name":1860,"version_count":140,"cve_count":140,"kev_count":76,"last_cve_update":1861},136995,"rhq_mongo_db_drift_server","2019-11-04",{"id":1863,"product_name":1864,"version_count":140,"cve_count":140,"kev_count":76,"last_cve_update":207},136594,"ceph_storage_for_ibm_z_systems",{"id":1866,"product_name":1867,"version_count":102,"cve_count":140,"kev_count":76,"last_cve_update":1868},137081,"xerces","2020-09-17",{"id":1870,"product_name":1871,"version_count":115,"cve_count":140,"kev_count":76,"last_cve_update":1872},137000,"rsync","2003-12-15",{"id":1874,"product_name":1875,"version_count":76,"cve_count":140,"kev_count":140,"last_cve_update":397},137001,"run_once_duration_override_operator",{"id":1877,"product_name":1878,"version_count":76,"cve_count":140,"kev_count":76,"last_cve_update":1879},136592,"ceph-iscsi-cli","2018-10-09",{"id":1881,"product_name":1882,"version_count":140,"cve_count":140,"kev_count":76,"last_cve_update":1883},136590,"cairo","2007-11-30",{"id":1885,"product_name":1886,"version_count":76,"cve_count":140,"kev_count":76,"last_cve_update":1384},136589,"business-central",{"id":1888,"product_name":1889,"version_count":76,"cve_count":140,"kev_count":140,"last_cve_update":397},137006,"self_node_remediation_operator",{"id":1891,"product_name":1892,"version_count":102,"cve_count":140,"kev_count":76,"last_cve_update":1437},137007,"sendmail",{"id":1894,"product_name":1895,"version_count":140,"cve_count":140,"kev_count":76,"last_cve_update":63},137009,"servicemesh-operator",{"id":1897,"product_name":1898,"version_count":140,"cve_count":140,"kev_count":140,"last_cve_update":397},137010,"service_telemetry_framework",{"id":1900,"product_name":1901,"version_count":138,"cve_count":140,"kev_count":76,"last_cve_update":1902},137011,"setup","2018-07-03",{"id":1904,"product_name":1905,"version_count":140,"cve_count":140,"kev_count":76,"last_cve_update":1617},136582,"bigmem_kernel",{"id":1907,"product_name":1908,"version_count":76,"cve_count":140,"kev_count":76,"last_cve_update":1909},137015,"slapi-nis","2015-03-30",{"id":1911,"product_name":1912,"version_count":237,"cve_count":140,"kev_count":76,"last_cve_update":292},137016,"smallrye_config",{"id":1914,"product_name":1915,"version_count":25,"cve_count":140,"kev_count":76,"last_cve_update":207},137017,"smallrye_health",{"id":1917,"product_name":1918,"version_count":140,"cve_count":140,"kev_count":76,"last_cve_update":1919},137019,"software_collection","2019-09-26",{"id":1921,"product_name":1922,"version_count":1923,"cve_count":140,"kev_count":76,"last_cve_update":1924},136581,"beaker",362,"2017-09-06",{"id":1926,"product_name":1927,"version_count":140,"cve_count":140,"kev_count":76,"last_cve_update":349},137083,"xpaas",{"id":1929,"product_name":1930,"version_count":140,"cve_count":140,"kev_count":76,"last_cve_update":1931},137022,"soteria","2020-05-04",{"id":1933,"product_name":1934,"version_count":60,"cve_count":140,"kev_count":76,"last_cve_update":1935},137023,"source-to-image","2018-06-12",{"id":1937,"product_name":1938,"version_count":140,"cve_count":140,"kev_count":140,"last_cve_update":1939},136578,"application_stack","2012-05-11",{"id":1941,"product_name":1942,"version_count":76,"cve_count":140,"kev_count":76,"last_cve_update":1247},137026,"spacewalk-web",{"id":1944,"product_name":1945,"version_count":76,"cve_count":140,"kev_count":76,"last_cve_update":1946},137028,"spice-activex","2010-12-08",{"id":1948,"product_name":1949,"version_count":140,"cve_count":140,"kev_count":76,"last_cve_update":1950},136572,"ansible_galaxy","2022-04-18",{"id":1952,"product_name":1953,"version_count":76,"cve_count":140,"kev_count":76,"last_cve_update":1954},137084,"yum-rhn-plugin","2010-06-07",{"id":1956,"product_name":1957,"version_count":140,"cve_count":140,"kev_count":76,"last_cve_update":1958},137033,"storage_console_node","2017-06-27",{"id":1960,"product_name":1961,"version_count":140,"cve_count":140,"kev_count":76,"last_cve_update":1962},137035,"storage_management_console","2013-04-09",{"id":1964,"product_name":1965,"version_count":76,"cve_count":140,"kev_count":76,"last_cve_update":207},136568,"ansible_automation_platform_text-only_advisories",{"id":1967,"product_name":1968,"version_count":1243,"cve_count":140,"kev_count":76,"last_cve_update":1969},137085,"zanata","2019-12-03",{"id":1971,"product_name":1972,"version_count":140,"cve_count":76,"kev_count":76,"last_cve_update":1973},136987,"rhel_stronghold",null,{"id":1975,"product_name":1976,"version_count":102,"cve_count":76,"kev_count":76,"last_cve_update":1973},136988,"rhel_virtualization",{"id":1978,"product_name":1979,"version_count":140,"cve_count":76,"kev_count":76,"last_cve_update":1973},136667,"enterprise_linux_cluster-storage",{"id":1981,"product_name":1982,"version_count":76,"cve_count":76,"kev_count":76,"last_cve_update":1973},137080,"xemacs",{"id":1984,"product_name":1985,"version_count":140,"cve_count":76,"kev_count":76,"last_cve_update":1973},137041,"supplementary",{"id":1987,"product_name":1988,"version_count":39,"cve_count":76,"kev_count":76,"last_cve_update":1973},136863,"libtirpc",{"id":1990,"product_name":1991,"version_count":140,"cve_count":76,"kev_count":76,"last_cve_update":1973},136986,"rhel_productivity",{"id":1993,"product_name":1994,"version_count":21,"cve_count":76,"kev_count":76,"last_cve_update":1973},136857,"language_support_for_java",{"id":1996,"product_name":1997,"version_count":76,"cve_count":76,"kev_count":76,"last_cve_update":1973},136964,"power_tool",{"id":1999,"product_name":2000,"version_count":140,"cve_count":76,"kev_count":76,"last_cve_update":1973},136996,"rhx_enterprise_db",{"id":2002,"product_name":2003,"version_count":140,"cve_count":76,"kev_count":76,"last_cve_update":1973},136997,"rhx_enterprisedb_advanced_server",{"id":2005,"product_name":2006,"version_count":76,"cve_count":76,"kev_count":76,"last_cve_update":1973},136935,"openshift-origin-msg-node-mcollective",{"id":2008,"product_name":2009,"version_count":76,"cve_count":76,"kev_count":76,"last_cve_update":1973},136577,"application_server",{"id":2011,"product_name":2012,"version_count":83,"cve_count":76,"kev_count":76,"last_cve_update":1973},136675,"enterprise_linux_developer_suite",{"id":2014,"product_name":2015,"version_count":107,"cve_count":76,"kev_count":76,"last_cve_update":1973},137027,"spice",{"id":2017,"product_name":2018,"version_count":102,"cve_count":76,"kev_count":76,"last_cve_update":1973},136717,"enterprise_linux_server_for_power_little_endian",{"id":2020,"product_name":2021,"version_count":89,"cve_count":76,"kev_count":76,"last_cve_update":1973},136985,"rhel_global_file_system",{"id":2023,"product_name":2024,"version_count":21,"cve_count":76,"kev_count":76,"last_cve_update":1973},137029,"spice-gtk",{"id":2026,"product_name":2027,"version_count":140,"cve_count":76,"kev_count":76,"last_cve_update":1973},136981,"rhel_cluster_storage",{"id":2029,"product_name":2030,"version_count":140,"cve_count":76,"kev_count":76,"last_cve_update":1973},136645,"desktop_supplementary",{"id":2032,"product_name":2033,"version_count":76,"cve_count":76,"kev_count":76,"last_cve_update":1973},136647,"developer_suite",{"id":2035,"product_name":2036,"version_count":107,"cve_count":76,"kev_count":76,"last_cve_update":1973},136984,"rhel_extras",{"id":2038,"product_name":2039,"version_count":107,"cve_count":76,"kev_count":76,"last_cve_update":1973},136668,"enterprise_linux_cluster_suite",{"id":2041,"product_name":2042,"version_count":107,"cve_count":76,"kev_count":76,"last_cve_update":1973},136980,"rhel_cluster",{"id":2044,"product_name":2045,"version_count":76,"cve_count":76,"kev_count":76,"last_cve_update":1973},136852,"kon2",{"id":2047,"product_name":2048,"version_count":115,"cve_count":76,"kev_count":76,"last_cve_update":1973},136983,"rhel_developer_suite",{"id":2050,"product_name":2051,"version_count":76,"cve_count":76,"kev_count":76,"last_cve_update":1973},136982,"rhel_cluster_suite",{"id":2053,"product_name":2054,"version_count":102,"cve_count":76,"kev_count":76,"last_cve_update":1973},136979,"rhel_application_stack",{"id":2056,"product_name":2057,"version_count":102,"cve_count":76,"kev_count":76,"last_cve_update":1973},136978,"rhel_application_server",{"id":2059,"product_name":2060,"version_count":76,"cve_count":76,"kev_count":76,"last_cve_update":1973},136966,"pre_execution_environment_server",{"id":2062,"product_name":2063,"version_count":76,"cve_count":76,"kev_count":76,"last_cve_update":1973},137052,"thunderbird",{"id":2065,"product_name":2066,"version_count":140,"cve_count":76,"kev_count":76,"last_cve_update":1973},137018,"smart_card_manager","Redhat is a technology vendor with 538 tracked products and 5740 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this vendor.",[2069,2076,2081,2089,2096,2101,2105,2111,2116,2122],{"cveId":2070,"description":2071,"publishedDate":1939,"cvssScore":2072,"cvssVersion":2073,"severity":2074,"isKev":4,"epssScore":2075},"CVE-2012-1823","sapi\u002Fcgi\u002Fcgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'd' case.",9.8,"v3.1","Critical",0.99998,{"cveId":2077,"description":2078,"publishedDate":2079,"cvssScore":2072,"cvssVersion":2073,"severity":2074,"isKev":4,"epssScore":2080},"CVE-2011-3544","Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7 and 6 Update 27 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availability via unknown vectors related to Scripting.","2011-10-19",0.96653,{"cveId":2082,"description":2083,"publishedDate":2084,"cvssScore":2085,"cvssVersion":2073,"severity":2086,"isKev":2087,"epssScore":2088},"CVE-2008-1447","The DNS protocol, as implemented in (1) BIND 8 and 9 before 9.5.0-P1, 9.4.2-P1, and 9.3.5-P1; (2) Microsoft DNS in Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP1 and SP2; and other implementations allow remote attackers to spoof DNS traffic via a birthday attack that uses in-bailiwick referrals to conduct cache poisoning against recursive resolvers, related to insufficient randomness of DNS transaction IDs and source ports, aka \"DNS Insufficient Socket Entropy Vulnerability\" or \"the Kaminsky bug.\"","2008-07-08",6.8,"Medium",false,0.95182,{"cveId":2090,"description":2091,"publishedDate":2092,"cvssScore":2093,"cvssVersion":2094,"severity":2086,"isKev":2087,"epssScore":2095},"CVE-2006-3918","http_protocol.c in (1) IBM HTTP Server 6.0 before 6.0.2.13 and 6.1 before 6.1.0.1, and (2) Apache HTTP Server 1.3 before 1.3.35, 2.0 before 2.0.58, and 2.2 before 2.2.2, does not sanitize the Expect header from an HTTP request when it is reflected back in an error message, which might allow cross-site scripting (XSS) style attacks using web client components that can send arbitrary headers in requests, as demonstrated using a Flash SWF file.","2006-07-28",4.3,"v2",0.95145,{"cveId":2097,"description":2098,"publishedDate":2099,"cvssScore":2072,"cvssVersion":2073,"severity":2074,"isKev":4,"epssScore":2100},"CVE-2012-1723","Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.","2012-06-16",0.93566,{"cveId":2102,"description":2103,"publishedDate":942,"cvssScore":2072,"cvssVersion":2073,"severity":2074,"isKev":2087,"epssScore":2104},"CVE-2011-3923","Apache Struts before 2.3.1.2 allows remote attackers to bypass security protections in the ParameterInterceptor class and execute arbitrary commands.",0.89492,{"cveId":2106,"description":2107,"publishedDate":870,"cvssScore":2108,"cvssVersion":2073,"severity":2109,"isKev":4,"epssScore":2110},"CVE-2010-1871","JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, does not properly sanitize inputs for JBoss Expression Language (EL) expressions, which allows remote attackers to execute arbitrary code via a crafted URL.  NOTE: this is only a vulnerability when the Java Security Manager is not properly configured.",8.8,"High",0.83397,{"cveId":2112,"description":2113,"publishedDate":2114,"cvssScore":2093,"cvssVersion":2094,"severity":2086,"isKev":2087,"epssScore":2115},"CVE-2012-0053","protocol.c in the Apache HTTP Server 2.2.x through 2.2.21 does not properly restrict header information during construction of Bad Request (aka 400) error documents, which allows remote attackers to obtain the values of HTTPOnly cookies via vectors involving a (1) long or (2) malformed header in conjunction with crafted web script.","2012-01-28",0.82198,{"cveId":2117,"description":2118,"publishedDate":2119,"cvssScore":2120,"cvssVersion":2094,"severity":2109,"isKev":2087,"epssScore":2121},"CVE-2007-5365","Stack-based buffer overflow in the cons_options function in options.c in dhcpd in OpenBSD 4.0 through 4.2, and some other dhcpd implementations based on ISC dhcp-2, allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via a DHCP request specifying a maximum message size smaller than the minimum IP MTU.","2007-10-11",7.2,0.80265,{"cveId":2123,"description":2124,"publishedDate":2125,"cvssScore":115,"cvssVersion":2094,"severity":2086,"isKev":2087,"epssScore":2126},"CVE-2009-1386","ssl\u002Fs3_pkt.c in OpenSSL before 0.9.8i allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a DTLS ChangeCipherSpec packet that occurs before ClientHello.","2009-06-04",0.80134,[2128,2136,2143,2152,2161,2170,2179,2188,2197,2204,2211,2217,2226,2233,2240,2246,2254,2260,2269,2277,2284,2290,2297,2305,2312,2320,2328,2335,2342,2348,2354,2361,2368,2375,2383,2390,2397,2404,2411,2418,2426,2432,2440,2446,2455,2461,2469,2476,2481,2489,2496,2503,2509,2515,2522,2525,2532,2539,2545,2551,2557,2563,2569,2575,2580,2587,2589,2595,2597,2603,2610,2616,2623,2629,2635,2640,2647,2654,2661,2669,2675,2680,2688,2695,2698,2705,2711,2718,2724,2730,2736,2743,2750],{"cveId":2129,"description":2130,"publishedDate":1076,"cvssScore":2120,"cvssVersion":2094,"severity":2109,"isKev":4,"epssScore":2131,"cisaVulnName":2132,"cisaDateAdded":2133,"cisaShortDescription":2134,"cisaRequiredAction":2135},"CVE-2015-3246","libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies \u002Fetc\u002Fpasswd, which allows local users to cause a denial of service (inconsistent file state) by causing an error during the modification. NOTE: this issue can be combined with CVE-2015-3245 to gain privileges.",0.08503,"Red Hat Libuser Race Condition Vulnerability","2026-08-26","Red Hat libuser contains a race condition vulnerability that allows authenticated local users to corrupt the \u002Fetc\u002Fpasswd file to cause a denial of service or privilege escalation.","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",{"cveId":2137,"description":2138,"publishedDate":1657,"cvssScore":2139,"cvssVersion":2094,"severity":2086,"isKev":4,"epssScore":2140,"cisaVulnName":2141,"cisaDateAdded":2133,"cisaShortDescription":2142,"cisaRequiredAction":2135},"CVE-2015-5287","The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions to gain privileges via a symlink attack on a file with a predictable name, as demonstrated by \u002Fvar\u002Ftmp\u002Fabrt\u002Fabrt-hax-coredump or \u002Fvar\u002Fspool\u002Fabrt\u002Fabrt-hax-coredump.",6.9,0.05003,"Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability","Red Hat Automatic Bug Reporting Tool (ABRT) contains a privilege escalation vulnerability that could allow local users with certain permissions to gain privileges via a symlink attack on a file with a predictable name. The impacted product(s) could be end-of-life (EoL) and\u002For end-of-service (EoS). Users are advised to discontinue use and\u002For transition to a supported version.",{"cveId":2144,"description":2145,"publishedDate":316,"cvssScore":2146,"cvssVersion":2073,"severity":2109,"isKev":4,"epssScore":2147,"cisaVulnName":2148,"cisaDateAdded":2149,"cisaShortDescription":2150,"cisaRequiredAction":2151},"CVE-2022-0492","A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel\u002Fcgroup\u002Fcgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace isolation unexpectedly.",7.8,0.05528,"Linux Kernel Improper Authentication Vulnerability","2026-06-02","Linux Kernel contains an improper authentication vulnerability which could allow for privilege escalation via the cgroups v1 release_agent feature.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":2153,"description":2154,"publishedDate":2155,"cvssScore":2146,"cvssVersion":2073,"severity":2109,"isKev":4,"epssScore":2156,"cisaVulnName":2157,"cisaDateAdded":2158,"cisaShortDescription":2159,"cisaRequiredAction":2160},"CVE-2026-31431","In the Linux kernel, the following vulnerability has been resolved:\n\ncrypto: algif_aead - Revert to operating out-of-place\n\nThis mostly reverts commit 72548b093ee3 except for the copying of\nthe associated data.\n\nThere is no benefit in operating in-place in algif_aead since the\nsource and destination come from different mappings.  Get rid of\nall the complexity added for in-place operation and just copy the\nAD directly.","2026-04-22",0.98114,"Linux Kernel Incorrect Resource Transfer Between Spheres Vulnerability","2026-05-01","Linux Kernel contains an incorrect resource transfer between spheres vulnerability that could allow for privilege escalation.","\"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":2162,"description":2163,"publishedDate":2164,"cvssScore":2146,"cvssVersion":2165,"severity":2109,"isKev":4,"epssScore":2166,"cisaVulnName":2167,"cisaDateAdded":2168,"cisaShortDescription":2169,"cisaRequiredAction":2151},"CVE-2018-14634","An integer overflow flaw was found in the Linux kernel's create_elf_tables() function. An unprivileged local user with access to SUID (or otherwise privileged) binary could use this flaw to escalate their privileges on the system. Kernel versions 2.6.x, 3.10.x and 4.14.x are believed to be vulnerable.","2018-09-25","v3.0",0.14689,"Linux Kernel Integer Overflow Vulnerability","2026-01-26","Linux Kernel contains an integer overflow vulnerability in the create_elf_tables() function which could allow an unprivileged local user with access to SUID (or otherwise privileged) binary to escalate their privileges on the system.",{"cveId":2171,"description":2172,"publishedDate":2173,"cvssScore":2174,"cvssVersion":2073,"severity":2074,"isKev":4,"epssScore":2175,"cisaVulnName":2176,"cisaDateAdded":2177,"cisaShortDescription":2178,"cisaRequiredAction":2151},"CVE-2025-32463","Sudo before 1.9.17p1 allows local users to obtain root access because \u002Fetc\u002Fnsswitch.conf from a user-controlled directory is used with the --chroot option.","2025-06-30",9.3,0.55498,"Sudo Inclusion of Functionality from Untrusted Control Sphere Vulnerability","2025-09-29","Sudo contains an inclusion of functionality from untrusted control sphere vulnerability. This vulnerability could allow local attacker to leverage sudo’s -R (--chroot) option to run arbitrary commands as root, even if they are not listed in the sudoers file.",{"cveId":2180,"description":2181,"publishedDate":2182,"cvssScore":2183,"cvssVersion":2073,"severity":2109,"isKev":4,"epssScore":2184,"cisaVulnName":2185,"cisaDateAdded":2186,"cisaShortDescription":2187,"cisaRequiredAction":2151},"CVE-2019-5418","There is a File Content Disclosure vulnerability in Action View \u003C5.2.2.1, \u003C5.1.6.2, \u003C5.0.7.2, \u003C4.2.11.1 and v3 where specially crafted accept headers can cause contents of arbitrary files on the target system's filesystem to be exposed.","2019-03-27",7.5,0.98507,"Rails Ruby on Rails Path Traversal Vulnerability","2025-07-07","Rails Ruby on Rails contains a path traversal vulnerability in Action View. Specially crafted accept headers in combination with calls to `render file:` can cause arbitrary files on the target server to be rendered, disclosing the file contents.",{"cveId":2189,"description":2190,"publishedDate":2191,"cvssScore":2072,"cvssVersion":2073,"severity":2074,"isKev":4,"epssScore":2192,"cisaVulnName":2193,"cisaDateAdded":2194,"cisaShortDescription":2195,"cisaRequiredAction":2196},"CVE-2014-0497","Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors.","2014-02-05",0.99879,"Adobe Flash Player Integer Underflow Vulnerablity","2024-09-17","Adobe Flash Player contains an integer underflow vulnerability that allows a remote attacker to execute arbitrary code.","The impacted product is end-of-life (EoL) and\u002For end-of-service (EoS). Users should discontinue utilization of the product.",{"cveId":2198,"description":2199,"publishedDate":2200,"cvssScore":2108,"cvssVersion":2073,"severity":2109,"isKev":4,"epssScore":2201,"cisaVulnName":2202,"cisaDateAdded":2194,"cisaShortDescription":2203,"cisaRequiredAction":2196},"CVE-2014-0502","Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on Android, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK & Compiler before 4.0.0.1628 allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2014.","2014-02-21",0.24817,"Adobe Flash Player Double Free Vulnerablity","Adobe Flash Player contains a double free vulnerability that allows a remote attacker to execute arbitrary code.",{"cveId":2205,"description":2206,"publishedDate":2207,"cvssScore":2108,"cvssVersion":2073,"severity":2109,"isKev":4,"epssScore":2208,"cisaVulnName":2209,"cisaDateAdded":2194,"cisaShortDescription":2210,"cisaRequiredAction":2196},"CVE-2013-0643","The Firefox sandbox in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202.273 on Linux, does not properly restrict privileges, which makes it easier for remote attackers to execute arbitrary code via crafted SWF content, as exploited in the wild in February 2013.","2013-02-27",0.10533,"Adobe Flash Player Incorrect Default Permissions Vulnerability","Adobe Flash Player contains an incorrect default permissions vulnerability in the Firefox sandbox that allows a remote attacker to execute arbitrary code via crafted SWF content. ",{"cveId":2212,"description":2213,"publishedDate":2207,"cvssScore":2108,"cvssVersion":2073,"severity":2109,"isKev":4,"epssScore":2214,"cisaVulnName":2215,"cisaDateAdded":2194,"cisaShortDescription":2216,"cisaRequiredAction":2196},"CVE-2013-0648","Unspecified vulnerability in the ExternalInterface ActionScript functionality in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202.273 on Linux, allows remote attackers to execute arbitrary code via crafted SWF content, as exploited in the wild in February 2013.",0.11094,"Adobe Flash Player Code Execution Vulnerability","Adobe Flash Player contains an unspecified vulnerability in the ExternalInterface ActionScript functionality that allows a remote attacker to execute arbitrary code via crafted SWF content.",{"cveId":2218,"description":2219,"publishedDate":2220,"cvssScore":2146,"cvssVersion":2073,"severity":2109,"isKev":4,"epssScore":2221,"cisaVulnName":2222,"cisaDateAdded":2223,"cisaShortDescription":2224,"cisaRequiredAction":2225},"CVE-2017-1000253","Linux distributions that have not patched their long-term kernels with https:\u002F\u002Fgit.kernel.org\u002Flinus\u002Fa87938b2e246b81b4fb713edb371a9fa3c5c3c86 (committed on April 14, 2015). This kernel vulnerability was fixed in April 2015 by commit a87938b2e246b81b4fb713edb371a9fa3c5c3c86 (backported to Linux 3.10.77 in May 2015), but it was not recognized as a security threat. With CONFIG_ARCH_BINFMT_ELF_RANDOMIZE_PIE enabled, and a normal top-down address allocation strategy, load_elf_binary() will attempt to map a PIE binary into an address range immediately below mm->mmap_base. Unfortunately, load_elf_ binary() does not take account of the need to allocate sufficient space for the entire binary which means that, while the first PT_LOAD segment is mapped below mm->mmap_base, the subsequent PT_LOAD segment(s) end up being mapped above mm->mmap_base into the are that is supposed to be the \"gap\" between the stack and the binary.","2017-10-05",0.10695,"Linux Kernel PIE Stack Buffer Corruption Vulnerability ","2024-09-09","Linux kernel contains a position-independent executable (PIE) stack buffer corruption vulnerability in load_elf_ binary() that allows a local attacker to escalate privileges. ","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"cveId":2227,"description":2228,"publishedDate":28,"cvssScore":2146,"cvssVersion":2073,"severity":2109,"isKev":4,"epssScore":2229,"cisaVulnName":2230,"cisaDateAdded":2231,"cisaShortDescription":2232,"cisaRequiredAction":2225},"CVE-2024-1086","A use-after-free vulnerability in the Linux kernel's netfilter: nf_tables component can be exploited to achieve local privilege escalation.\n\n\n\nThe nft_verdict_init() function allows positive values as drop error within the hook verdict, and hence the nf_hook_slow() function can cause a double free vulnerability when NF_DROP is issued with a drop error which resembles NF_ACCEPT.\n\n\n\nWe recommend upgrading past commit f342de4e2f33e0e39165d8639387aa6c19dff660.",0.28058,"Linux Kernel Use-After-Free Vulnerability","2024-05-30","Linux kernel contains a use-after-free vulnerability in the netfilter: nf_tables component that allows an attacker to achieve local privilege escalation.",{"cveId":2234,"description":2235,"publishedDate":393,"cvssScore":2146,"cvssVersion":2073,"severity":2109,"isKev":4,"epssScore":2236,"cisaVulnName":2237,"cisaDateAdded":2238,"cisaShortDescription":2239,"cisaRequiredAction":2225},"CVE-2023-4911","A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.",0.63769,"GNU C Library Buffer Overflow Vulnerability","2023-11-21","GNU C Library's dynamic loader ld.so contains a buffer overflow vulnerability when processing the GLIBC_TUNABLES environment variable, allowing a local attacker to execute code with elevated privileges.",{"cveId":2241,"description":2242,"publishedDate":397,"cvssScore":2183,"cvssVersion":2073,"severity":2109,"isKev":4,"epssScore":2243,"cisaVulnName":2244,"cisaDateAdded":397,"cisaShortDescription":2245,"cisaRequiredAction":2151},"CVE-2023-44487","The HTTP\u002F2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.",0.99999,"HTTP\u002F2 Rapid Reset Attack Vulnerability","HTTP\u002F2 contains a rapid reset vulnerability that allows for a distributed denial-of-service attack (DDoS).",{"cveId":2247,"description":2248,"publishedDate":2249,"cvssScore":2108,"cvssVersion":2073,"severity":2109,"isKev":4,"epssScore":2250,"cisaVulnName":2251,"cisaDateAdded":2252,"cisaShortDescription":2253,"cisaRequiredAction":2225},"CVE-2023-5217","Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)","2023-09-28",0.49013,"Google Chromium libvpx Heap Buffer Overflow Vulnerability","2023-10-02","Google Chromium libvpx contains a heap buffer overflow vulnerability in vp8 encoding that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could impact web browsers using libvpx, including but not limited to Google Chrome.",{"cveId":2255,"description":2256,"publishedDate":643,"cvssScore":2072,"cvssVersion":2073,"severity":2074,"isKev":4,"epssScore":2257,"cisaVulnName":2258,"cisaDateAdded":2249,"cisaShortDescription":2259,"cisaRequiredAction":2225},"CVE-2018-14667","The RichFaces Framework 3.X through 3.3.4 is vulnerable to Expression Language (EL) injection via the UserResource resource. A remote, unauthenticated attacker could exploit this to execute arbitrary code using a chain of java serialized objects via org.ajax4jsf.resource.UserResource$UriData.",0.74202,"Red Hat JBoss RichFaces Framework Expression Language Injection Vulnerability","Red Hat JBoss RichFaces Framework contains an expression language injection vulnerability via the UserResource resource. A remote, unauthenticated attacker could exploit this vulnerability to execute malicious code using a chain of Java serialized objects via org.ajax4jsf.resource.UserResource$UriData.",{"cveId":2261,"description":2262,"publishedDate":2263,"cvssScore":2183,"cvssVersion":2073,"severity":2109,"isKev":4,"epssScore":2264,"cisaVulnName":2265,"cisaDateAdded":2266,"cisaShortDescription":2267,"cisaRequiredAction":2268},"CVE-2016-9079","A use-after-free vulnerability in SVG Animation has been discovered. An exploit built on this vulnerability has been discovered in the wild targeting Firefox and Tor Browser users on Windows. This vulnerability affects Firefox \u003C 50.0.2, Firefox ESR \u003C 45.5.1, and Thunderbird \u003C 45.5.1.","2018-06-11",0.87357,"Mozilla Firefox, Firefox ESR, and Thunderbird Use-After-Free Vulnerability","2023-06-22","Mozilla Firefox, Firefox ESR, and Thunderbird contain a use-after-free vulnerability in SVG Animation, targeting Firefox and Tor browser users on Windows.","Apply updates per vendor instructions.",{"cveId":2270,"description":2271,"publishedDate":2272,"cvssScore":2108,"cvssVersion":2073,"severity":2109,"isKev":4,"epssScore":2273,"cisaVulnName":2274,"cisaDateAdded":2275,"cisaShortDescription":2276,"cisaRequiredAction":2268},"CVE-2023-32373","A use-after-free issue was addressed with improved memory management. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, Safari 16.5, iOS 16.5 and iPadOS 16.5. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.","2023-06-23",0.12172,"Apple Multiple Products WebKit Use-After-Free Vulnerability","2023-05-22","Apple iOS, iPadOS, macOS, tvOS, watchOS, and Safari WebKit contain a use-after-free vulnerability that leads to code execution when processing maliciously crafted web content. This vulnerability could impact HTML parsers that use WebKit, including but not limited to Apple Safari and non-Apple products which rely on WebKit for HTML processing.",{"cveId":2278,"description":2279,"publishedDate":2280,"cvssScore":2072,"cvssVersion":2073,"severity":2074,"isKev":4,"epssScore":2281,"cisaVulnName":2282,"cisaDateAdded":96,"cisaShortDescription":2283,"cisaRequiredAction":2268},"CVE-2016-8735","Remote code execution is possible with Apache Tomcat before 6.0.48, 7.x before 7.0.73, 8.x before 8.0.39, 8.5.x before 8.5.7, and 9.x before 9.0.0.M12 if JmxRemoteLifecycleListener is used and an attacker can reach JMX ports. The issue exists because this listener wasn't updated for consistency with the CVE-2016-3427 Oracle patch that affected credential types.","2017-04-06",0.90338,"Apache Tomcat Remote Code Execution Vulnerability","Apache Tomcat contains an unspecified vulnerability that allows for remote code execution if JmxRemoteLifecycleListener is used and an attacker can reach Java Management Extension (JMX) ports. This CVE exists because this listener wasn't updated for consistency with the Oracle patched issues for CVE-2016-3427 which affected credential types.",{"cveId":2285,"description":2286,"publishedDate":1217,"cvssScore":2072,"cvssVersion":2073,"severity":2074,"isKev":4,"epssScore":2287,"cisaVulnName":2288,"cisaDateAdded":96,"cisaShortDescription":2289,"cisaRequiredAction":2268},"CVE-2016-3427","Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.",0.92334,"Oracle Java SE and JRockit Unspecified Vulnerability","Oracle Java SE and JRockit contains an unspecified vulnerability that allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Java Management Extensions (JMX). This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service.",{"cveId":2291,"description":2292,"publishedDate":2293,"cvssScore":2146,"cvssVersion":2073,"severity":2109,"isKev":4,"epssScore":2294,"cisaVulnName":2295,"cisaDateAdded":96,"cisaShortDescription":2296,"cisaRequiredAction":2268},"CVE-2021-3560","It was found that polkit could be tricked into bypassing the credential checks for D-Bus requests, elevating the privileges of the requestor to the root user. This flaw could be used by an unprivileged local attacker to, for example, create a new local administrator. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.","2022-02-16",0.23708,"Red Hat Polkit Incorrect Authorization Vulnerability","Red Hat Polkit contains an incorrect authorization vulnerability through the bypassing of credential checks for D-Bus requests, allowing for privilege escalation.",{"cveId":2298,"description":2299,"publishedDate":2300,"cvssScore":2146,"cvssVersion":2073,"severity":2109,"isKev":4,"epssScore":2301,"cisaVulnName":2302,"cisaDateAdded":96,"cisaShortDescription":2303,"cisaRequiredAction":2304},"CVE-2010-3904","The rds_page_copy_user function in net\u002Frds\u002Fpage.c in the Reliable Datagram Sockets (RDS) protocol implementation in the Linux kernel before 2.6.36 does not properly validate addresses obtained from user space, which allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls.","2010-12-06",0.15861,"Linux Kernel Improper Input Validation Vulnerability","Linux Kernel contains an improper input validation vulnerability in the Reliable Datagram Sockets (RDS) protocol implementation that allows local users to gain privileges via crafted use of the sendmsg and recvmsg system calls.","The impacted product is end-of-life and should be disconnected if still in use.",{"cveId":2306,"description":2307,"publishedDate":2308,"cvssScore":2183,"cvssVersion":2073,"severity":2109,"isKev":4,"epssScore":2309,"cisaVulnName":2310,"cisaDateAdded":96,"cisaShortDescription":2311,"cisaRequiredAction":2268},"CVE-2015-5317","The Fingerprints pages in Jenkins before 1.638 and LTS before 1.625.2 might allow remote attackers to obtain sensitive job and build name information via a direct request.","2015-11-25",0.23003,"Jenkins User Interface (UI) Information Disclosure Vulnerability","Jenkins User Interface (UI) contains an information disclosure vulnerability that allows users to see the names of jobs and builds otherwise inaccessible to them on the \"Fingerprints\" pages.",{"cveId":2313,"description":2314,"publishedDate":2315,"cvssScore":2316,"cvssVersion":2073,"severity":2086,"isKev":4,"epssScore":2317,"cisaVulnName":2318,"cisaDateAdded":96,"cisaShortDescription":2319,"cisaRequiredAction":2304},"CVE-2014-0196","The n_tty_write function in drivers\u002Ftty\u002Fn_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the \"LECHO & !OPOST\" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering a race condition involving read and write operations with long strings.","2014-05-07",5.5,0.20329,"Linux Kernel Race Condition Vulnerability","Linux Kernel contains a race condition vulnerability within the n_tty_write function that allows local users to cause a denial-of-service (DoS) or gain privileges via read and write operations with long strings.",{"cveId":2321,"description":2322,"publishedDate":2323,"cvssScore":2146,"cvssVersion":2073,"severity":2109,"isKev":4,"epssScore":2324,"cisaVulnName":2325,"cisaDateAdded":2326,"cisaShortDescription":2327,"cisaRequiredAction":2268},"CVE-2021-4034","A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully executed the attack can cause a local privilege escalation given unprivileged users administrative rights on the target machine.","2022-01-28",0.94921,"Red Hat Polkit Out-of-Bounds Read and Write Vulnerability","2022-06-27","The Red Hat polkit pkexec utility contains an out-of-bounds read and write vulnerability that allows for privilege escalation with administrative rights.",{"cveId":2329,"description":2330,"publishedDate":521,"cvssScore":2108,"cvssVersion":2073,"severity":2109,"isKev":4,"epssScore":2331,"cisaVulnName":2332,"cisaDateAdded":2333,"cisaShortDescription":2334,"cisaRequiredAction":2268},"CVE-2017-5030","Incorrect handling of complex species in V8 in Google Chrome prior to 57.0.2987.98 for Linux, Windows, and Mac and 57.0.2987.108 for Android allowed a remote attacker to execute arbitrary code via a crafted HTML page.",0.40635,"Google Chromium V8 Memory Corruption Vulnerability","2022-06-08","Google Chromium V8 Engine contains a memory corruption vulnerability that allows a remote attacker to execute code via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":2336,"description":2337,"publishedDate":2338,"cvssScore":2108,"cvssVersion":2073,"severity":2109,"isKev":4,"epssScore":2339,"cisaVulnName":2340,"cisaDateAdded":2333,"cisaShortDescription":2341,"cisaRequiredAction":2268},"CVE-2018-17463","Incorrect side effect annotation in V8 in Google Chrome prior to 70.0.3538.64 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.","2018-11-14",0.84564,"Google Chromium V8 Remote Code Execution Vulnerability","Google Chromium V8 Engine contains an unspecified vulnerability that allows a remote attacker to execute code inside a sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":2343,"description":2344,"publishedDate":238,"cvssScore":2108,"cvssVersion":2073,"severity":2109,"isKev":4,"epssScore":2345,"cisaVulnName":2346,"cisaDateAdded":2333,"cisaShortDescription":2347,"cisaRequiredAction":2268},"CVE-2018-17480","Execution of user supplied Javascript during array deserialization leading to an out of bounds write in V8 in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.",0.3564,"Google Chromium V8 Out-of-Bounds Write Vulnerability","Google Chromium V8 Engine contains out-of-bounds write vulnerability that allows a remote attacker to execute code inside a sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":2349,"description":2350,"publishedDate":2338,"cvssScore":2108,"cvssVersion":2073,"severity":2109,"isKev":4,"epssScore":2351,"cisaVulnName":2352,"cisaDateAdded":2333,"cisaShortDescription":2353,"cisaRequiredAction":2268},"CVE-2018-6065","Integer overflow in computing the required allocation size when instantiating a new javascript object in V8 in Google Chrome prior to 65.0.3325.146 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.",0.60304,"Google Chromium V8 Integer Overflow Vulnerability","Google Chromium V8 Engine contains an integer overflow vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":2355,"description":2356,"publishedDate":2357,"cvssScore":2108,"cvssVersion":2073,"severity":2109,"isKev":4,"epssScore":2358,"cisaVulnName":2359,"cisaDateAdded":2333,"cisaShortDescription":2360,"cisaRequiredAction":2268},"CVE-2016-5198","V8 in Google Chrome prior to 54.0.2840.90 for Linux, and 54.0.2840.85 for Android, and 54.0.2840.87 for Windows and Mac included incorrect optimisation assumptions, which allowed a remote attacker to perform arbitrary read\u002Fwrite operations, leading to code execution, via a crafted HTML page.","2017-01-19",0.34164,"Google Chromium V8 Out-of-Bounds Memory Vulnerability","Google Chromium V8 Engine contains an out-of-bounds memory access vulnerability that allows a remote attacker to perform read\u002Fwrite operations, leading to code execution, via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":2362,"description":2363,"publishedDate":2364,"cvssScore":2108,"cvssVersion":2073,"severity":2109,"isKev":4,"epssScore":2365,"cisaVulnName":2366,"cisaDateAdded":2333,"cisaShortDescription":2367,"cisaRequiredAction":2268},"CVE-2016-1646","The Array.prototype.concat implementation in builtins.cc in Google V8, as used in Google Chrome before 49.0.2623.108, does not properly consider element data types, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted JavaScript code.","2016-03-29",0.4811,"Google Chromium V8 Out-of-Bounds Read Vulnerability","Google Chromium V8 Engine contains an out-of-bounds read vulnerability that allows a remote attacker to cause a denial of service or possibly have another unspecified impact via crafted JavaScript code. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":2369,"description":2370,"publishedDate":2371,"cvssScore":2108,"cvssVersion":2073,"severity":2109,"isKev":4,"epssScore":2372,"cisaVulnName":2373,"cisaDateAdded":2333,"cisaShortDescription":2374,"cisaRequiredAction":2268},"CVE-2017-5070","Type confusion in V8 in Google Chrome prior to 59.0.3071.86 for Linux, Windows, and Mac, and 59.0.3071.92 for Android, allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.","2017-10-27",0.32071,"Google Chromium V8 Type Confusion Vulnerability","Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to execute code inside a sandbox via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":2376,"description":2377,"publishedDate":2378,"cvssScore":2108,"cvssVersion":2073,"severity":2109,"isKev":4,"epssScore":2379,"cisaVulnName":2380,"cisaDateAdded":2381,"cisaShortDescription":2382,"cisaRequiredAction":2268},"CVE-2015-4495","The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remote attackers to bypass the Same Origin Policy, and read arbitrary files or gain privileges, via vectors involving crafted JavaScript code and a native setter, as exploited in the wild in August 2015.","2015-08-08",0.68558,"Mozilla Firefox Security Feature Bypass Vulnerability","2022-05-25","Moxilla Firefox allows remote attackers to bypass the Same Origin Policy to read arbitrary files or gain privileges.",{"cveId":2384,"description":2385,"publishedDate":2386,"cvssScore":2108,"cvssVersion":2073,"severity":2109,"isKev":4,"epssScore":2387,"cisaVulnName":2388,"cisaDateAdded":2381,"cisaShortDescription":2389,"cisaRequiredAction":2304},"CVE-2015-8651","Integer overflow in Adobe Flash Player before 18.0.0.324 and 19.x and 20.x before 20.0.0.267 on Windows and OS X and before 11.2.202.559 on Linux, Adobe AIR before 20.0.0.233, Adobe AIR SDK before 20.0.0.233, and Adobe AIR SDK & Compiler before 20.0.0.233 allows attackers to execute arbitrary code via unspecified vectors.","2015-12-28",0.67698,"Adobe Flash Player Integer Overflow Vulnerability","Integer overflow in Adobe Flash Player allows attackers to execute code.",{"cveId":2391,"description":2392,"publishedDate":2393,"cvssScore":2146,"cvssVersion":2073,"severity":2109,"isKev":4,"epssScore":2394,"cisaVulnName":2395,"cisaDateAdded":2381,"cisaShortDescription":2396,"cisaRequiredAction":2268},"CVE-2014-3153","The futex_requeue function in kernel\u002Ffutex.c in the Linux kernel through 3.14.5 does not ensure that calls have two different futex addresses, which allows local users to gain privileges via a crafted FUTEX_REQUEUE command that facilitates unsafe waiter modification.","2014-06-07",0.37233,"Linux Kernel Privilege Escalation Vulnerability","The futex_requeue function in kernel\u002Ffutex.c in Linux kernel does not ensure that calls have two different futex addresses, which allows local users to gain privileges.",{"cveId":2398,"description":2399,"publishedDate":2400,"cvssScore":2183,"cvssVersion":2073,"severity":2109,"isKev":4,"epssScore":2401,"cisaVulnName":2402,"cisaDateAdded":2381,"cisaShortDescription":2403,"cisaRequiredAction":2268},"CVE-2010-1428","The Web Console (aka web-console) in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access control only for the GET and POST methods, which allows remote attackers to obtain sensitive information via an unspecified request that uses a different method.","2010-04-28",0.52654,"Red Hat JBoss Information Disclosure Vulnerability","Unauthenticated access to the JBoss Application Server Web Console (\u002Fweb-console) is blocked by default. However, it was found that this block was incomplete, and only blocked GET and POST HTTP verbs. A remote attacker could use this flaw to gain access to sensitive information.",{"cveId":2405,"description":2406,"publishedDate":2400,"cvssScore":2407,"cvssVersion":2073,"severity":2086,"isKev":4,"epssScore":2408,"cisaVulnName":2409,"cisaDateAdded":2381,"cisaShortDescription":2410,"cisaRequiredAction":2268},"CVE-2010-0738","The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform (aka JBoss EAP or JBEAP) 4.2 before 4.2.0.CP09 and 4.3 before 4.3.0.CP08 performs access control only for the GET and POST methods, which allows remote attackers to send requests to this application's GET handler by using a different method.",5.3,0.73815,"Red Hat JBoss Authentication Bypass Vulnerability","The JMX-Console web application in JBossAs in Red Hat JBoss Enterprise Application Platform performs access control only for the GET and POST methods, which allows remote attackers to send requests to this application's GET handler by using a different method.",{"cveId":2412,"description":2413,"publishedDate":2414,"cvssScore":2146,"cvssVersion":2073,"severity":2109,"isKev":4,"epssScore":2415,"cisaVulnName":2416,"cisaDateAdded":1818,"cisaShortDescription":2417,"cisaRequiredAction":2268},"CVE-2017-8291","Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via .rsdparams type confusion with a \"\u002FOutputFile (%pipe%\" substring in a crafted .eps document that is an input to the gs program, as exploited in the wild in April 2017.","2017-04-27",0.96968,"Artifex Ghostscript Type Confusion Vulnerability","Artifex Ghostscript allows -dSAFER bypass and remote command execution via .rsdparams type confusion with a \"\u002FOutputFile.",{"cveId":2419,"description":2420,"publishedDate":2421,"cvssScore":2072,"cvssVersion":2073,"severity":2074,"isKev":4,"epssScore":2422,"cisaVulnName":2423,"cisaDateAdded":2424,"cisaShortDescription":2425,"cisaRequiredAction":2304},"CVE-2018-5002","Adobe Flash Player versions 29.0.0.171 and earlier have a Stack-based buffer overflow vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the current user.","2018-07-09",0.25059,"Adobe Flash Player Stack-based Buffer Overflow Vulnerability","2022-05-23","Adobe Flash Player have a stack-based buffer overflow vulnerability that could lead to remote code execution.",{"cveId":2427,"description":2428,"publishedDate":1576,"cvssScore":2108,"cvssVersion":2073,"severity":2109,"isKev":4,"epssScore":2429,"cisaVulnName":2430,"cisaDateAdded":2424,"cisaShortDescription":2431,"cisaRequiredAction":2268},"CVE-2019-8720","A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code execution. Improved memory handling addresses the multiple memory corruption issues.",0.01556,"WebKitGTK Memory Corruption Vulnerability","WebKitGTK contains a memory corruption vulnerability which can allow an attacker to perform remote code execution.",{"cveId":2433,"description":2434,"publishedDate":2435,"cvssScore":2108,"cvssVersion":2073,"severity":2109,"isKev":4,"epssScore":2436,"cisaVulnName":2437,"cisaDateAdded":2438,"cisaShortDescription":2439,"cisaRequiredAction":2268},"CVE-2019-8506","A type confusion issue was addressed with improved memory handling. This issue is fixed in iOS 12.2, tvOS 12.2, watchOS 5.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. Processing maliciously crafted web content may lead to arbitrary code execution.","2019-12-18",0.16159,"Apple Multiple Products Type Confusion Vulnerability","2022-05-04","A type confusion issue affecting multiple Apple products allows processing of maliciously crafted web content, leading to arbitrary code execution.",{"cveId":2441,"description":2442,"publishedDate":2443,"cvssScore":2183,"cvssVersion":2073,"severity":2109,"isKev":4,"epssScore":2243,"cisaVulnName":2444,"cisaDateAdded":2438,"cisaShortDescription":2445,"cisaRequiredAction":2268},"CVE-2014-0160","The (1) TLS and (2) DTLS implementations in OpenSSL 1.0.1 before 1.0.1g do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information from process memory via crafted packets that trigger a buffer over-read, as demonstrated by reading private keys, related to d1_both.c and t1_lib.c, aka the Heartbleed bug.","2014-04-07","OpenSSL Information Disclosure Vulnerability","The TLS and DTLS implementations in OpenSSL do not properly handle Heartbeat Extension packets, which allows remote attackers to obtain sensitive information.",{"cveId":2447,"description":2448,"publishedDate":2449,"cvssScore":2450,"cvssVersion":2073,"severity":2074,"isKev":4,"epssScore":2451,"cisaVulnName":2452,"cisaDateAdded":2453,"cisaShortDescription":2454,"cisaRequiredAction":2268},"CVE-2019-1003029","A sandbox bypass vulnerability exists in Jenkins Script Security Plugin 1.53 and earlier in src\u002Fmain\u002Fjava\u002Forg\u002Fjenkinsci\u002Fplugins\u002Fscriptsecurity\u002Fsandbox\u002Fgroovy\u002FGroovySandbox.java, src\u002Fmain\u002Fjava\u002Forg\u002Fjenkinsci\u002Fplugins\u002Fscriptsecurity\u002Fsandbox\u002Fgroovy\u002FSecureGroovyScript.java that allows attackers with Overall\u002FRead permission to execute arbitrary code on the Jenkins master JVM.","2019-03-08",9.9,0.7444,"Jenkins Script Security Plugin Sandbox Bypass Vulnerability","2022-04-25","Jenkins Script Security Plugin contains a protection mechanism failure, allowing an attacker to bypass the sandbox.",{"cveId":2456,"description":2457,"publishedDate":2458,"cvssScore":2146,"cvssVersion":2073,"severity":2109,"isKev":4,"epssScore":2459,"cisaVulnName":2395,"cisaDateAdded":2453,"cisaShortDescription":2460,"cisaRequiredAction":2268},"CVE-2022-0847","A flaw was found in the way the \"flags\" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use this flaw to write to pages in the page cache backed by read only files and as such escalate their privileges on the system.","2022-03-10",0.92795,"Linux kernel contains an improper initialization vulnerability where an unprivileged local user could escalate their privileges on the system. This vulnerability has the moniker of \"Dirty Pipe.\"",{"cveId":2462,"description":2463,"publishedDate":2464,"cvssScore":2072,"cvssVersion":2073,"severity":2074,"isKev":4,"epssScore":2465,"cisaVulnName":2466,"cisaDateAdded":2467,"cisaShortDescription":2468,"cisaRequiredAction":2304},"CVE-2015-5123","Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on Windows and OS X, 11.x through 11.2.202.481 on Linux, and 12.x through 18.0.0.204 on Linux Chrome installations allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that overrides a valueOf function, as exploited in the wild in July 2015.","2015-07-14",0.1883,"Adobe Flash Player Use-After-Free Vulnerability","2022-04-13","Use-after-free vulnerability in the BitmapData class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS).",{"cveId":2470,"description":2471,"publishedDate":2472,"cvssScore":2072,"cvssVersion":2073,"severity":2074,"isKev":4,"epssScore":2473,"cisaVulnName":2474,"cisaDateAdded":2467,"cisaShortDescription":2475,"cisaRequiredAction":2304},"CVE-2015-3113","Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in June 2015.","2015-06-23",0.99812,"Adobe Flash Player Heap-Based Buffer Overflow Vulnerability","Heap-based buffer overflow vulnerability in Adobe Flash Player allows remote attackers to execute code.",{"cveId":2477,"description":2478,"publishedDate":2464,"cvssScore":2072,"cvssVersion":2073,"severity":2074,"isKev":4,"epssScore":2479,"cisaVulnName":2466,"cisaDateAdded":2467,"cisaShortDescription":2480,"cisaRequiredAction":2304},"CVE-2015-5122","Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.302 on Windows and OS X, 14.x through 18.0.0.203 on Windows and OS X, 11.x through 11.2.202.481 on Linux, and 12.x through 18.0.0.204 on Linux Chrome installations allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that leverages improper handling of the opaqueBackground property, as exploited in the wild in July 2015.",0.87033,"Use-after-free vulnerability in the DisplayObject class in the ActionScript 3 (AS3) implementation in Adobe Flash Player allows remote attackers to execute code or cause a denial-of-service (DoS).",{"cveId":2482,"description":2483,"publishedDate":2484,"cvssScore":2072,"cvssVersion":2073,"severity":2074,"isKev":4,"epssScore":2485,"cisaVulnName":2486,"cisaDateAdded":2487,"cisaShortDescription":2488,"cisaRequiredAction":2268},"CVE-2013-2729","Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-2727.","2013-05-16",0.66555,"Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability","2022-03-28","Integer overflow vulnerability in Adobe Reader and Acrobat allows attackers to execute remote code.",{"cveId":2490,"description":2491,"publishedDate":2492,"cvssScore":2108,"cvssVersion":2073,"severity":2109,"isKev":4,"epssScore":2493,"cisaVulnName":2494,"cisaDateAdded":2487,"cisaShortDescription":2495,"cisaRequiredAction":2268},"CVE-2013-1690","Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted web site that triggers an attempt to execute data at an unmapped memory location.","2013-06-26",0.69021,"Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability","Mozilla Firefox and Thunderbird do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial-of-service (DoS) or possibly execute malicious code via a crafted web site.",{"cveId":2497,"description":2498,"publishedDate":2499,"cvssScore":2183,"cvssVersion":2073,"severity":2109,"isKev":4,"epssScore":2500,"cisaVulnName":2501,"cisaDateAdded":2487,"cisaShortDescription":2502,"cisaRequiredAction":2304},"CVE-2012-2034","Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2037.","2012-06-09",0.07713,"Adobe Flash Player Memory Corruption Vulnerability","Adobe Flash Player contains a memory corruption vulnerability that allows for remote code execution or denial-of-service (DoS).",{"cveId":2504,"description":2505,"publishedDate":2449,"cvssScore":2450,"cvssVersion":2073,"severity":2074,"isKev":4,"epssScore":2506,"cisaVulnName":2507,"cisaDateAdded":1141,"cisaShortDescription":2508,"cisaRequiredAction":2268},"CVE-2019-1003030","A sandbox bypass vulnerability exists in Jenkins Pipeline: Groovy Plugin 2.63 and earlier in pom.xml, src\u002Fmain\u002Fjava\u002Forg\u002Fjenkinsci\u002Fplugins\u002Fworkflow\u002Fcps\u002FCpsGroovyShell.java that allows attackers able to control pipeline scripts to execute arbitrary code on the Jenkins master JVM.",0.97058,"Jenkins Matrix Project Plugin Remote Code Execution Vulnerability","Jenkins Matrix Project plugin contains a vulnerability which can allow users to escape the sandbox, opening opportunity to perform remote code execution.",{"cveId":2510,"description":2511,"publishedDate":2512,"cvssScore":2072,"cvssVersion":2073,"severity":2074,"isKev":4,"epssScore":2075,"cisaVulnName":2513,"cisaDateAdded":1141,"cisaShortDescription":2514,"cisaRequiredAction":2268},"CVE-2013-2251","Apache Struts 2.0.0 through 2.3.15 allows remote attackers to execute arbitrary OGNL expressions via a parameter with a crafted (1) action:, (2) redirect:, or (3) redirectAction: prefix.","2013-07-20","Apache Struts Improper Input Validation Vulnerability","Apache Struts allows remote attackers to execute arbitrary Object-Graph Navigation Language (OGNL) expressions.",{"cveId":2516,"description":2517,"publishedDate":2518,"cvssScore":2072,"cvssVersion":2073,"severity":2074,"isKev":4,"epssScore":2519,"cisaVulnName":2520,"cisaDateAdded":1141,"cisaShortDescription":2521,"cisaRequiredAction":2304},"CVE-2016-4171","Unspecified vulnerability in Adobe Flash Player 21.0.0.242 and earlier allows remote attackers to execute arbitrary code via unknown vectors, as exploited in the wild in June 2016.","2016-06-16",0.20055,"Adobe Flash Player Remote Code Execution Vulnerability","Unspecified vulnerability in Adobe Flash Player allows for remote code execution.",{"cveId":2070,"description":2071,"publishedDate":1939,"cvssScore":2072,"cvssVersion":2073,"severity":2074,"isKev":4,"epssScore":2075,"cisaVulnName":2523,"cisaDateAdded":1141,"cisaShortDescription":2524,"cisaRequiredAction":2268},"PHP-CGI Query String Parameter Vulnerability","sapi\u002Fcgi\u002Fcgi_main.c in PHP, when configured as a CGI script, does not properly handle query strings, which allows remote attackers to execute arbitrary code.",{"cveId":2526,"description":2527,"publishedDate":2528,"cvssScore":2072,"cvssVersion":2073,"severity":2074,"isKev":4,"epssScore":2529,"cisaVulnName":2530,"cisaDateAdded":1141,"cisaShortDescription":2531,"cisaRequiredAction":2268},"CVE-2015-1427","The Groovy scripting engine in Elasticsearch before 1.3.8 and 1.4.x before 1.4.3 allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands via a crafted script.","2015-02-17",0.99906,"Elasticsearch Groovy Scripting Engine Remote Code Execution Vulnerability","The Groovy scripting engine in Elasticsearch allows remote attackers to bypass the sandbox protection mechanism and execute arbitrary shell commands.",{"cveId":2533,"description":2534,"publishedDate":691,"cvssScore":2535,"cvssVersion":2073,"severity":2109,"isKev":4,"epssScore":2536,"cisaVulnName":2537,"cisaDateAdded":1141,"cisaShortDescription":2538,"cisaRequiredAction":2268},"CVE-2019-11043","In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buffers into the space reserved for FCGI protocol data, thus opening the possibility of remote code execution.",8.7,0.99748,"PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability","In some versions of PHP in certain configurations of FPM setup, it is possible to cause FPM module to write past allocated buffers allowing the possibility of remote code execution.",{"cveId":2540,"description":2541,"publishedDate":1213,"cvssScore":2542,"cvssVersion":2073,"severity":2109,"isKev":4,"epssScore":2543,"cisaVulnName":2282,"cisaDateAdded":1141,"cisaShortDescription":2544,"cisaRequiredAction":2268},"CVE-2017-12617","When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default servlet to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.",8.1,0.99968,"When running Apache Tomcat, it is possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.",{"cveId":2546,"description":2547,"publishedDate":1162,"cvssScore":2542,"cvssVersion":2073,"severity":2109,"isKev":4,"epssScore":2548,"cisaVulnName":2549,"cisaDateAdded":1141,"cisaShortDescription":2550,"cisaRequiredAction":2268},"CVE-2017-12615","When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.",0.99707,"Apache Tomcat on Windows Remote Code Execution Vulnerability","When running Apache Tomcat on Windows with HTTP PUTs enabled, it is possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.",{"cveId":2552,"description":2553,"publishedDate":2315,"cvssScore":2183,"cvssVersion":2073,"severity":2109,"isKev":4,"epssScore":2554,"cisaVulnName":2555,"cisaDateAdded":1141,"cisaShortDescription":2556,"cisaRequiredAction":2268},"CVE-2014-0130","Directory traversal vulnerability in actionpack\u002Flib\u002Fabstract_controller\u002Fbase.rb in the implicit-render implementation in Ruby on Rails before 3.2.18, 4.0.x before 4.0.5, and 4.1.x before 4.1.1, when certain route globbing configurations are enabled, allows remote attackers to read arbitrary files via a crafted request.",0.53703,"Ruby on Rails Directory Traversal Vulnerability","Directory traversal vulnerability in actionpack\u002Flib\u002Fabstract_controller\u002Fbase.rb in the implicit-render implementation in Ruby on Rails allows remote attackers to read arbitrary files via a crafted request.",{"cveId":2558,"description":2559,"publishedDate":2560,"cvssScore":2183,"cvssVersion":2073,"severity":2109,"isKev":4,"epssScore":2561,"cisaVulnName":2555,"cisaDateAdded":1141,"cisaShortDescription":2562,"cisaRequiredAction":2268},"CVE-2016-0752","Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing a .. (dot dot) in a pathname.","2016-02-16",0.95537,"Directory traversal vulnerability in Action View in Ruby on Rails allows remote attackers to read arbitrary files.",{"cveId":2564,"description":2565,"publishedDate":469,"cvssScore":2072,"cvssVersion":2073,"severity":2074,"isKev":4,"epssScore":2566,"cisaVulnName":2567,"cisaDateAdded":316,"cisaShortDescription":2568,"cisaRequiredAction":2304},"CVE-2016-4117","Adobe Flash Player 21.0.0.226 and earlier allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in May 2016.",0.94354,"Adobe Flash Player Arbitrary Code Execution Vulnerability","An access of resource using incompatible type vulnerability exists within Adobe Flash Player that allows an attacker to perform remote code execution.",{"cveId":2570,"description":2571,"publishedDate":354,"cvssScore":2072,"cvssVersion":2073,"severity":2074,"isKev":4,"epssScore":2572,"cisaVulnName":2573,"cisaDateAdded":316,"cisaShortDescription":2574,"cisaRequiredAction":2268},"CVE-2015-2590","Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2015-4732.",0.25469,"Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability","An unspecified vulnerability exists within Oracle Java Runtime Environment that allows an attacker to perform remote code execution.",{"cveId":2576,"description":2577,"publishedDate":1522,"cvssScore":2072,"cvssVersion":2073,"severity":2074,"isKev":4,"epssScore":2578,"cisaVulnName":2501,"cisaDateAdded":316,"cisaShortDescription":2579,"cisaRequiredAction":2304},"CVE-2015-3043","Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in April 2015, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, and CVE-2015-3042.",0.73862,"A memory corruption vulnerability exists in Adobe Flash Player that allows an attacker to perform remote code execution.",{"cveId":2581,"description":2582,"publishedDate":2583,"cvssScore":2072,"cvssVersion":2073,"severity":2074,"isKev":4,"epssScore":2584,"cisaVulnName":2585,"cisaDateAdded":316,"cisaShortDescription":2586,"cisaRequiredAction":2268},"CVE-2012-4681","Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow remote attackers to execute arbitrary code via a crafted applet that bypasses SecurityManager restrictions by (1) using com.sun.beans.finder.ClassFinder.findClass and leveraging an exception with the forName method to access restricted classes from arbitrary packages such as sun.awt.SunToolkit, then (2) using \"reflection with a trusted immediate caller\" to leverage the getField method to access and modify private fields, as exploited in the wild in August 2012 using Gondzz.class and Gondvv.class.","2012-08-28",0.98536,"Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability","The Java Runtime Environment (JRE) component in Oracle Java SE allow for remote code execution.",{"cveId":2077,"description":2078,"publishedDate":2079,"cvssScore":2072,"cvssVersion":2073,"severity":2074,"isKev":4,"epssScore":2080,"cisaVulnName":2585,"cisaDateAdded":316,"cisaShortDescription":2588,"cisaRequiredAction":2268},"An access control vulnerability exists in the Applet Rhino Script Engine component of Oracle's Java Runtime Environment allows an attacker to remotely execute arbitrary code.",{"cveId":2590,"description":2591,"publishedDate":2592,"cvssScore":2072,"cvssVersion":2073,"severity":2074,"isKev":4,"epssScore":2593,"cisaVulnName":2466,"cisaDateAdded":316,"cisaShortDescription":2594,"cisaRequiredAction":2304},"CVE-2015-5119","Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.296 and 14.x through 18.0.0.194 on Windows and OS X and 11.x through 11.2.202.468 on Linux allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that overrides a valueOf function, as exploited in the wild in July 2015.","2015-07-08",0.98618,"A use-after-free vulnerability exists within the ActionScript 3 ByteArray class in Adobe Flash Player that allows an attacker to perform remote code execution.",{"cveId":2097,"description":2098,"publishedDate":2099,"cvssScore":2072,"cvssVersion":2073,"severity":2074,"isKev":4,"epssScore":2100,"cisaVulnName":2585,"cisaDateAdded":316,"cisaShortDescription":2596,"cisaRequiredAction":2268},"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE allows remote attackers to affect confidentiality, integrity, and availability via Unknown vectors related to Hotspot.",{"cveId":2598,"description":2599,"publishedDate":2600,"cvssScore":2108,"cvssVersion":2073,"severity":2109,"isKev":4,"epssScore":2601,"cisaVulnName":2466,"cisaDateAdded":316,"cisaShortDescription":2602,"cisaRequiredAction":2304},"CVE-2016-7855","Use-after-free vulnerability in Adobe Flash Player before 23.0.0.205 on Windows and OS X and before 11.2.202.643 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in October 2016.","2016-11-01",0.25198,"Use-after-free vulnerability in Adobe Flash Player Windows and OS and Linux allows remote attackers to execute arbitrary code.",{"cveId":2604,"description":2605,"publishedDate":2606,"cvssScore":2108,"cvssVersion":2073,"severity":2109,"isKev":4,"epssScore":2607,"cisaVulnName":2608,"cisaDateAdded":316,"cisaShortDescription":2609,"cisaRequiredAction":2304},"CVE-2017-11292","Adobe Flash Player version 27.0.0.159 and earlier has a flawed bytecode verification procedure, which allows for an untrusted value to be used in the calculation of an array index. This can lead to type confusion, and successful exploitation could lead to arbitrary code execution.","2017-10-22",0.11885,"Adobe Flash Player Type Confusion Vulnerability","Adobe Flash Player contains a type confusion vulnerability which can allow for remote code execution.",{"cveId":2611,"description":2612,"publishedDate":2613,"cvssScore":2146,"cvssVersion":2073,"severity":2109,"isKev":4,"epssScore":2614,"cisaVulnName":2567,"cisaDateAdded":316,"cisaShortDescription":2615,"cisaRequiredAction":2304},"CVE-2015-7645","Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11.x through 11.2.202.535 on Linux allows remote attackers to execute arbitrary code via a crafted SWF file, as exploited in the wild in October 2015.","2015-10-15",0.65339,"Adobe Flash Player allows remote attackers to execute arbitrary code via a crafted SWF file.",{"cveId":2617,"description":2618,"publishedDate":2619,"cvssScore":2146,"cvssVersion":2073,"severity":2109,"isKev":4,"epssScore":2620,"cisaVulnName":2621,"cisaDateAdded":316,"cisaShortDescription":2622,"cisaRequiredAction":2268},"CVE-2013-0641","Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allows remote attackers to execute arbitrary code via a crafted PDF document, as exploited in the wild in February 2013.","2013-02-14",0.32346,"Adobe Reader Buffer Overflow Vulnerability","A buffer overflow vulnerability exists in Adobe Reader which allows an attacker to perform remote code execution.",{"cveId":2624,"description":2625,"publishedDate":2619,"cvssScore":2146,"cvssVersion":2073,"severity":2109,"isKev":4,"epssScore":2626,"cisaVulnName":2627,"cisaDateAdded":316,"cisaShortDescription":2628,"cisaRequiredAction":2268},"CVE-2013-0640","Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document, as exploited in the wild in February 2013.",0.86927,"Adobe Reader and Acrobat Memory Corruption Vulnerability","An memory corruption vulnerability exists in the acroform.dll in Adobe Reader that allows an attacker to perform remote code execution.",{"cveId":2630,"description":2631,"publishedDate":2632,"cvssScore":2146,"cvssVersion":2073,"severity":2109,"isKev":4,"epssScore":2633,"cisaVulnName":2567,"cisaDateAdded":316,"cisaShortDescription":2634,"cisaRequiredAction":2304},"CVE-2012-1535","Unspecified vulnerability in Adobe Flash Player before 11.3.300.271 on Windows and Mac OS X and before 11.2.202.238 on Linux allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted SWF content, as exploited in the wild in August 2012 with SWF content in a Word document.","2012-08-15",0.70384,"Unspecified vulnerability in Adobe Flash Player allows remote attackers to execute arbitrary code or cause a denial of service via crafted SWF content.",{"cveId":2636,"description":2637,"publishedDate":893,"cvssScore":69,"cvssVersion":2073,"severity":2109,"isKev":4,"epssScore":2638,"cisaVulnName":2318,"cisaDateAdded":316,"cisaShortDescription":2639,"cisaRequiredAction":2268},"CVE-2016-5195","Race condition in mm\u002Fgup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016, aka \"Dirty COW.\"",0.83524,"Race condition in mm\u002Fgup.c in the Linux kernel allows local users to escalate privileges.",{"cveId":2641,"description":2642,"publishedDate":2484,"cvssScore":2643,"cvssVersion":2073,"severity":2086,"isKev":4,"epssScore":2644,"cisaVulnName":2645,"cisaDateAdded":316,"cisaShortDescription":2646,"cisaRequiredAction":2268},"CVE-2013-1675","Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 do not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.",6.5,0.06696,"Mozilla Firefox Information Disclosure Vulnerability","Mozilla Firefox does not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.",{"cveId":2648,"description":2649,"publishedDate":2650,"cvssScore":2407,"cvssVersion":2073,"severity":2086,"isKev":4,"epssScore":2651,"cisaVulnName":2652,"cisaDateAdded":316,"cisaShortDescription":2653,"cisaRequiredAction":2268},"CVE-2015-4902","Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment.","2015-10-22",0.13603,"Oracle Java SE Integrity Check Vulnerability","Unspecified vulnerability in Oracle Java SE allows remote attackers to affect integrity via Unknown vectors related to deployment.",{"cveId":2655,"description":2656,"publishedDate":2657,"cvssScore":2072,"cvssVersion":2073,"severity":2074,"isKev":4,"epssScore":2658,"cisaVulnName":2466,"cisaDateAdded":2659,"cisaShortDescription":2660,"cisaRequiredAction":2304},"CVE-2018-15982","Flash Player versions 31.0.0.153 and earlier, and 31.0.0.108 and earlier have a use after free vulnerability. Successful exploitation could lead to arbitrary code execution.","2019-01-18",0.89581,"2022-02-15","Adobe Flash Player com.adobe.tvsdk.mediacore.metadata Use After Free Vulnerability",{"cveId":2662,"description":2663,"publishedDate":2664,"cvssScore":2072,"cvssVersion":2073,"severity":2074,"isKev":4,"epssScore":2665,"cisaVulnName":2666,"cisaDateAdded":2667,"cisaShortDescription":2668,"cisaRequiredAction":2268},"CVE-2018-1000861","A code execution vulnerability exists in the Stapler web framework used by Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in stapler\u002Fcore\u002Fsrc\u002Fmain\u002Fjava\u002Forg\u002Fkohsuke\u002Fstapler\u002FMetaClass.java that allows attackers to invoke some methods on Java objects by accessing crafted URLs that were not intended to be invoked this way.","2018-12-10",0.98326,"Jenkins Stapler Web Framework Deserialization of Untrusted Data Vulnerability","2022-02-10","A code execution vulnerability exists in the Stapler web framework used by Jenkins",{"cveId":2670,"description":2671,"publishedDate":603,"cvssScore":2072,"cvssVersion":2073,"severity":2074,"isKev":4,"epssScore":2672,"cisaVulnName":2673,"cisaDateAdded":2323,"cisaShortDescription":2674,"cisaRequiredAction":2268},"CVE-2014-7169","GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown other impact via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-6271.",0.9994,"GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability","GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code. This CVE correctly remediates the vulnerability in CVE-2014-6271.",{"cveId":2676,"description":2677,"publishedDate":2678,"cvssScore":2072,"cvssVersion":2073,"severity":2074,"isKev":4,"epssScore":2243,"cisaVulnName":2673,"cisaDateAdded":2323,"cisaShortDescription":2679,"cisaRequiredAction":2268},"CVE-2014-6271","GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka \"ShellShock.\"  NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix.","2014-09-24","GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code.",{"cveId":2681,"description":2682,"publishedDate":2683,"cvssScore":132,"cvssVersion":2073,"severity":2074,"isKev":4,"epssScore":2684,"cisaVulnName":2685,"cisaDateAdded":2686,"cisaShortDescription":2687,"cisaRequiredAction":2268},"CVE-2019-7609","Kibana versions before 5.6.15 and 6.6.1 contain an arbitrary code execution flaw in the Timelion visualizer. An attacker with access to the Timelion application could send a request that will attempt to execute javascript code. This could possibly lead to an attacker executing arbitrary commands with permissions of the Kibana process on the host system.","2019-03-25",0.95338,"Kibana Arbitrary Code Execution","2022-01-10","Kibana contain an arbitrary code execution flaw in the Timelion visualizer.",{"cveId":2689,"description":2690,"publishedDate":1213,"cvssScore":2072,"cvssVersion":2073,"severity":2074,"isKev":4,"epssScore":2691,"cisaVulnName":2692,"cisaDateAdded":2693,"cisaShortDescription":2694,"cisaRequiredAction":2268},"CVE-2017-12149","In Jboss Application Server as shipped with Red Hat Enterprise Application Platform 5.2, it was found that the doFilter method in the ReadOnlyAccessFilter of the HTTP Invoker does not restrict classes for which it performs deserialization and thus allowing an attacker to execute arbitrary code via crafted serialized data.",0.90713,"Red Hat JBoss Application Server Remote Code Execution Vulnerability","2021-12-10","The JBoss Application Server, shipped with Red Hat Enterprise Application Platform 5.2, allows an attacker to execute arbitrary code via crafted serialized data.",{"cveId":2106,"description":2107,"publishedDate":870,"cvssScore":2108,"cvssVersion":2073,"severity":2109,"isKev":4,"epssScore":2110,"cisaVulnName":2696,"cisaDateAdded":2693,"cisaShortDescription":2697,"cisaRequiredAction":2268},"Red Hat Linux JBoss Seam 2 Remote Code Execution Vulnerability","JBoss Seam 2 (jboss-seam2), as used in JBoss Enterprise Application Platform 4.3.0 for Red Hat Linux, allows attackers to perform remote code execution. This vulnerability can only be exploited when the Java Security Manager is not properly configured.",{"cveId":2699,"description":2700,"publishedDate":2701,"cvssScore":2146,"cvssVersion":2073,"severity":2109,"isKev":4,"epssScore":2702,"cisaVulnName":2703,"cisaDateAdded":2693,"cisaShortDescription":2704,"cisaRequiredAction":2268},"CVE-2019-13272","In the Linux kernel before 5.1.17, ptrace_link in kernel\u002Fptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship, which allows local users to obtain root access by leveraging certain scenarios with a parent-child process relationship, where a parent drops privileges and calls execve (potentially allowing control by an attacker). One contributing factor is an object lifetime issue (which can also cause a panic). Another contributing factor is incorrect marking of a ptrace relationship as privileged, which is exploitable through (for example) Polkit's pkexec helper with PTRACE_TRACEME. NOTE: SELinux deny_ptrace might be a usable workaround in some environments.","2019-07-17",0.52199,"Linux Kernel Improper Privilege Management Vulnerability","Kernel\u002Fptrace.c in Linux kernel mishandles contains an improper privilege management vulnerability that allows local users to obtain root access.",{"cveId":2706,"description":2707,"publishedDate":2708,"cvssScore":62,"cvssVersion":2073,"severity":2074,"isKev":4,"epssScore":2243,"cisaVulnName":2709,"cisaDateAdded":2710,"cisaShortDescription":2707,"cisaRequiredAction":2268},"CVE-2021-40438","A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.","2021-09-16","Apache HTTP Server-Side Request Forgery (SSRF)","2021-12-01",{"cveId":2712,"description":2713,"publishedDate":2714,"cvssScore":2072,"cvssVersion":2073,"severity":2074,"isKev":4,"epssScore":2715,"cisaVulnName":2466,"cisaDateAdded":2716,"cisaShortDescription":2717,"cisaRequiredAction":2304},"CVE-2018-4878","A use-after-free vulnerability was discovered in Adobe Flash Player before 28.0.0.161. This vulnerability occurs due to a dangling pointer in the Primetime SDK related to media player handling of listener objects. A successful attack can lead to arbitrary code execution. This was exploited in the wild in January and February 2018.","2018-02-06",0.9028,"2021-11-03","Adobe Flash Player contains a use-after-free vulnerability that could allow for code execution.",{"cveId":2719,"description":2720,"publishedDate":919,"cvssScore":2072,"cvssVersion":2073,"severity":2074,"isKev":4,"epssScore":2721,"cisaVulnName":2722,"cisaDateAdded":2716,"cisaShortDescription":2723,"cisaRequiredAction":2268},"CVE-2019-5544","OpenSLP as used in ESXi and the Horizon DaaS appliances has a heap overwrite issue. VMware has evaluated the severity of this issue to be in the Critical severity range with a maximum CVSSv3 base score of 9.8.",0.98129,"VMware ESXi and Horizon DaaS OpenSLP Heap-Based Buffer Overflow Vulnerability","VMware ESXi and Horizon Desktop as a Service (DaaS) OpenSLP contains a heap-based buffer overflow vulnerability that allows an attacker with network access to port 427 to overwrite the heap of the OpenSLP service to perform remote code execution.",{"cveId":2725,"description":2726,"publishedDate":1042,"cvssScore":2072,"cvssVersion":2073,"severity":2074,"isKev":4,"epssScore":2727,"cisaVulnName":2728,"cisaDateAdded":2716,"cisaShortDescription":2729,"cisaRequiredAction":2268},"CVE-2016-4437","Apache Shiro before 1.2.5, when a cipher key has not been configured for the \"remember me\" feature, allows remote attackers to execute arbitrary code or bypass intended access restrictions via an unspecified request parameter.",0.93039,"Apache Shiro Code Execution Vulnerability","Apache Shiro contains a vulnerability which may allow remote attackers to execute code or bypass intended access restrictions via an unspecified request parameter when a cipher key has not been configured for the \"remember me\" feature.",{"cveId":2731,"description":2732,"publishedDate":2733,"cvssScore":2108,"cvssVersion":2073,"severity":2109,"isKev":4,"epssScore":2734,"cisaVulnName":2373,"cisaDateAdded":2716,"cisaShortDescription":2735,"cisaRequiredAction":2268},"CVE-2020-6418","Type confusion in V8 in Google Chrome prior to 80.0.3987.122 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.","2020-02-27",0.78808,"Google Chromium V8 Engine contains a type confusion vulnerability allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":2737,"description":2738,"publishedDate":2739,"cvssScore":2146,"cvssVersion":2073,"severity":2109,"isKev":4,"epssScore":2740,"cisaVulnName":2741,"cisaDateAdded":2716,"cisaShortDescription":2742,"cisaRequiredAction":2268},"CVE-2019-0211","In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute arbitrary code with the privileges of the parent process (usually root) by manipulating the scoreboard. Non-Unix systems are not affected.","2019-04-08",0.65005,"Apache HTTP Server Privilege Escalation Vulnerability","Apache HTTP Server, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute code with the privileges of the parent process (usually root) by manipulating the scoreboard.",{"cveId":2744,"description":2745,"publishedDate":2746,"cvssScore":2316,"cvssVersion":2073,"severity":2086,"isKev":4,"epssScore":2747,"cisaVulnName":2748,"cisaDateAdded":2716,"cisaShortDescription":2749,"cisaRequiredAction":2268},"CVE-2016-3718","The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image.","2016-05-05",0.7565,"ImageMagick Server-Side Request Forgery (SSRF) Vulnerability","ImageMagick contains an unspecified vulnerability that allows attackers to perform server-side request forgery (SSRF) via a crafted image.",{"cveId":2751,"description":2752,"publishedDate":2746,"cvssScore":2316,"cvssVersion":2073,"severity":2086,"isKev":4,"epssScore":2753,"cisaVulnName":2754,"cisaDateAdded":2716,"cisaShortDescription":2755,"cisaRequiredAction":2268},"CVE-2016-3715","The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.",0.75307,"ImageMagick Arbitrary File Deletion Vulnerability","ImageMagick contains an unspecified vulnerability that could allow users to delete files by using ImageMagick's 'ephemeral' pseudo protocol, which deletes files after reading.",[2757,2758,2759,2760,2761,2762,2763,2764,2765,2766],{"id":17,"product_name":18,"version_count":19,"cve_count":20,"kev_count":21,"last_cve_update":13},{"id":23,"product_name":24,"version_count":25,"cve_count":26,"kev_count":27,"last_cve_update":28},{"id":30,"product_name":31,"version_count":32,"cve_count":33,"kev_count":34,"last_cve_update":35},{"id":37,"product_name":38,"version_count":39,"cve_count":40,"kev_count":19,"last_cve_update":28},{"id":42,"product_name":43,"version_count":44,"cve_count":45,"kev_count":46,"last_cve_update":35},{"id":48,"product_name":49,"version_count":46,"cve_count":50,"kev_count":51,"last_cve_update":35},{"id":53,"product_name":54,"version_count":55,"cve_count":56,"kev_count":44,"last_cve_update":35},{"id":58,"product_name":59,"version_count":60,"cve_count":61,"kev_count":62,"last_cve_update":63},{"id":65,"product_name":66,"version_count":67,"cve_count":68,"kev_count":69,"last_cve_update":70},{"id":72,"product_name":73,"version_count":74,"cve_count":75,"kev_count":76,"last_cve_update":77},{"title":2768,"metaDescription":2769,"keywords":2770,"structuredData":2771},"Redhat - Security Vulnerabilities & Analysis | EdgeProtect","Comprehensive security analysis for Redhat covering 538 products with 5740 tracked vulnerabilities including 33 critical and 53 high-severity issues and 89 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Redhat vulnerabilities, Redhat security, Redhat CVE, Redhat threat intelligence, vendor security analysis, cybersecurity threats, vulnerability management, CVE tracking, Redhat KEV, Redhat exploited vulnerabilities",{"@context":2772,"@type":2773,"name":2774,"description":2769,"url":2775},"https:\u002F\u002Fschema.org","Organization","Redhat","https:\u002F\u002Fedgeprotect.io\u002Fvendors\u002Fredhat",{"totalProducts":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":13,"generatedAt":2777,"apiVersion":2778},"2026-10-28T13:46:15.719Z","3.0"]