RedHat Software Collections vulnerabilities

137 known vulnerabilities, 5 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Exploited RedHat Software Collections vulnerabilities

CVE-2019-5418 — Rails Ruby on Rails Path Traversal Vulnerability
CVE-2019-11043 — PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability
CVE-2016-0752 — Ruby on Rails Directory Traversal Vulnerability
CVE-2021-40438 — Apache HTTP Server-Side Request Forgery (SSRF)
CVE-2019-0211 — Apache HTTP Server Privilege Escalation Vulnerability

CVE-2023-5870 — Postgresql: role pg_signal_backend can signal certain superuser processes. (CVSS 4.4)
CVE-2023-5869 — Postgresql: buffer overrun from integer overflow in array modification (CVSS 8.8)
CVE-2023-5868 — Postgresql: memory disclosure in aggregate function calls (CVSS 4.3)
CVE-2022-4900 — Potential buffer overflow in php_cli_server_startup_workers (CVSS 5.5)
CVE-2023-39417 — Postgresql: extension script @substitutions@ within quoting allow sql injection (CVSS 8.8)
CVE-2023-2455 — (CVSS 5.4)
CVE-2023-2454 — (CVSS 7.2)
CVE-2023-0056 — (CVSS 6.5)
CVE-2022-4904 — (CVSS 8.6)
CVE-2020-10735 — (CVSS 7.5)
CVE-2021-4189 — (CVSS 5.3)
CVE-2021-3656 — (CVSS 8.8)
CVE-2021-23214 — (CVSS 8.1)
CVE-2021-3677 — (CVSS 6.5)
CVE-2022-0711 — (CVSS 7.5)
CVE-2021-41819 — (CVSS 7.5)
CVE-2021-41817 — (CVSS 7.5)
CVE-2021-4104 — Deserialization of untrusted data in JMSAppender in Apache Log4j 1.2 (CVSS 7.5)
CVE-2021-32672 — Vulnerability in Lua Debugger in Redis (CVSS 4.3)
CVE-2021-40438 — Apache HTTP Server-Side Request Forgery (SSRF) (CVSS 9.0) — exploited
CVE-2021-32027 — (CVSS 8.8)
CVE-2021-3426 — (CVSS 5.7)
CVE-2021-3393 — (CVSS 4.3)
CVE-2021-20270 — (CVSS 7.5)
CVE-2019-10196 — (CVSS 9.8)