Software Collections vulnerabilities | LiveThreat CVE Feed

Product

Software Collections

by Redhat · last CVE Dec 10, 2023

On CISA KEVExploited in the wildRansomware-linked

137

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities137 In the news1 Timeline

Severity mix

Critical 12High 37Medium 85Low 3

Severity

All severities137 Critical12 High37 Medium85 Low3

Exploitation

On CISA KEV5 Exploited in the wild5

Watch

Add Software Collections to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2023-0056	6.5	2%	Mar 23	An uncontrolled resource consumption vulnerability was discovered in HAProxy which could crash the service Affected: All versions, or not specified
CVE-2021-3677	6.5	1%	Mar 2	A flaw was found in postgresql Affected: 1.0
CVE-2020-1720	6.5	1%	Mar 17	A flaw was found in PostgreSQL's "ALTER Affected: All versions, or not specified
CVE-2019-9516	6.5	56%	Aug 13	Some HTTP/2 implementations are vulnerable to a header leak, potentially leading to a denial of service Affected: 1.0
CVE-2019-2834	6.5	2%	Jul 23	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 1.0
CVE-2019-2812	6.5	2%	Jul 23	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 1.0
CVE-2019-2795	6.5	3%	Jul 23	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Charsets) Affected: 1.0
CVE-2019-2695	6.5	2%	Apr 23	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 1.0
CVE-2019-2694	6.5	2%	Apr 23	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 1.0
CVE-2019-2693	6.5	2%	Apr 23	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 1.0
CVE-2019-2434	6.5	3%	Jan 16	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Parser) Affected: 1.0
CVE-2019-2533	6.5	2%	Jan 16	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server : Security : Privileges) Affected: 1.0
CVE-2020-27783	6.1	4%	Dec 3	A XSS vulnerability was discovered in python-lxml's clean module Affected: All versions, or not specified
CVE-2013-5123	5.9	8%	Nov 5	The mirroring support (-M, --use-mirrors) in Python Pip before 1.5 uses insecure DNS querying and authenticity checks which allows attackers to perform man-in-the-middle attacks Affected: All versions, or not specified
CVE-2021-3426	5.7	2%	May 20	There's a flaw in Python 3's pydoc Affected: All versions, or not specified
CVE-2022-4900	5.5	0%	Nov 2	A vulnerability was found in PHP where setting the environment variable PHP_CLI_SERVER_WORKERS to a large value leads to a heap buffer overflow Affected: All versions, or not specified
CVE-2019-2819	5.5	2%	Jul 23	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Audit) Affected: 1.0
CVE-2019-2436	5.5	2%	Jan 16	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication) Affected: 1.0
CVE-2023-2455	5.4	1%	Jun 9	Row security policies disregard user ID changes after inlining; PostgreSQL could permit incorrect policies to be applied in certain cases where role-specific policies are used and… Affected: All versions, or not specified
CVE-2019-2778	5.4	2%	Jul 23	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges) Affected: 1.0
CVE-2021-4189	5.3	3%	Aug 24	A flaw was found in Python, specifically in the FTP (File Transfer Protocol) client library in PASV (passive) mode Affected: All versions, or not specified
CVE-2019-11038	5.3	4%	Jun 19	When using the gdImageCreateFromXbm() function in the GD Graphics Library (aka LibGD) 2.2.5, as used in the PHP GD extension in PHP versions 7.1.x below 7.1.30, 7.2.x below 7.2.19… Affected: 1.0
CVE-2019-2623	5.3	2%	Apr 23	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Options) Affected: 1.0
CVE-2019-2634	5.1	0%	Apr 23	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication) Affected: 1.0
CVE-2019-2536	5.0	0%	Jan 16	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging) Affected: 1.0
CVE-2019-2879	4.9	2%	Jul 23	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB) Affected: 1.0
CVE-2019-2830	4.9	2%	Jul 23	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 1.0
CVE-2019-2826	4.9	2%	Jul 23	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Roles) Affected: 1.0
CVE-2019-2815	4.9	2%	Jul 23	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 1.0
CVE-2019-2811	4.9	2%	Jul 23	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges) Affected: 1.0
CVE-2019-2810	4.9	2%	Jul 23	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 1.0
CVE-2019-2808	4.9	2%	Jul 23	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 1.0
CVE-2019-2803	4.9	2%	Jul 23	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 1.0
CVE-2019-2802	4.9	2%	Jul 23	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 1.0
CVE-2019-2801	4.9	2%	Jul 23	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: FTS) Affected: 1.0
CVE-2019-2798	4.9	2%	Jul 23	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB) Affected: 1.0
CVE-2019-2796	4.9	2%	Jul 23	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 1.0
CVE-2019-2785	4.9	3%	Jul 23	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: InnoDB) Affected: 1.0
CVE-2019-2784	4.9	2%	Jul 23	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DML) Affected: 1.0
CVE-2019-2780	4.9	2%	Jul 23	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Components / Services) Affected: 1.0
CVE-2019-2774	4.9	2%	Jul 23	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 1.0
CVE-2019-2757	4.9	2%	Jul 23	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 1.0
CVE-2019-2755	4.9	2%	Jul 23	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication) Affected: 1.0
CVE-2019-2752	4.9	2%	Jul 23	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Options) Affected: 1.0
CVE-2019-2691	4.9	2%	Apr 23	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Roles) Affected: 1.0
CVE-2019-2689	4.9	2%	Apr 23	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 1.0
CVE-2019-2688	4.9	2%	Apr 23	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 1.0
CVE-2019-2687	4.9	2%	Apr 23	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 1.0
CVE-2019-2686	4.9	2%	Apr 23	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 1.0
CVE-2019-2685	4.9	2%	Apr 23	Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Optimizer) Affected: 1.0