RHEL 7 : openstack-tripleo-common (RHSA-2019:1742)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:1742 advisory. openstack-tripleo-common contains the python library for code common to the Red Hat OpenStack Platform director CLI and GUI (codename tripleo). ...
8CVSS
7AI Score
0.004EPSS
RHEL 7 : rh-haproxy18-haproxy (RHSA-2019:1436)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:1436 advisory. haproxy: Information disclosure in check_request_for_cacheability function in proto_http.c (CVE-2018-11469) haproxy: Out-of-bounds...
7.5CVSS
7.3AI Score
0.009EPSS
RHEL 7 : qemu-kvm-rhev (RHSA-2019:2507)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:2507 advisory. KVM (Kernel-based Virtual Machine) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm-rhev packages provide...
9.8CVSS
7.6AI Score
0.011EPSS
RHEL 7 : openstack-nova (RHSA-2019:2652)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:2652 advisory. OpenStack Compute (nova) launches and schedules large networks of virtual machines, creating a redundant and scalable cloud computing platform....
6.5CVSS
6.5AI Score
0.001EPSS
RHEL 7 : rh-maven35-jackson-databind (RHSA-2019:4192)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:4192 advisory. jackson-databind: Serialization gadgets in org.apache.log4j.receivers.db.* (CVE-2019-17531) Note that Nessus has not tested for this issue but has...
9.8CVSS
6.9AI Score
0.007EPSS
RHEL 7 : docker (RHSA-2024:1270)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:1270 advisory. Docker is an open-source engine that automates the deployment of any application as a lightweight, portable, self-sufficient container that runs...
8.6CVSS
8.9AI Score
0.051EPSS
RHEL 8 : Red Hat OpenStack Platform 16.2 (openstack-nova) (RHSA-2023:1948)
The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:1948 advisory. OpenStack Compute (codename Nova) is open source software designed to provision and manage large networks of virtual machines,creating a ...
3.3CVSS
4.5AI Score
0.0005EPSS
RHEL 7 : firefox (RHSA-2024:1486)
The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:1486 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades...
7.5CVSS
9.4AI Score
0.001EPSS
RHEL 8 : Red Hat OpenStack Platform 16.1 (RHSA-2023:3156)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:3156 advisory. Security Fix(es): * EMBARGOED CVE-2023-2088 openstack-cinder: silently access other user's volumes (CVE-2023-2088) For more details about the...
6.5CVSS
6.5AI Score
0.001EPSS
RHEL 7 : rh-php71-php (RHSA-2019:2519)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:2519 advisory. gd: Unsigned integer underflow _gdContributionsAlloc() (CVE-2016-10166) php: Out of bounds access in php_pcre.c:php_pcre_replace_impl()...
9.8CVSS
7.6AI Score
0.921EPSS
RHEL 6 / 7 / 8 : Red Hat AMQ Interconnect 1.9.0 (RHSA-2020:4211)
The remote Redhat Enterprise Linux 6 / 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4211 advisory. jquery: Cross-site scripting (XSS) via HTML tags containing whitespaces (CVE-2020-7656) jquery: Cross-site scripting due to...
6.9CVSS
7AI Score
0.061EPSS
RHEL 7 / 8 : Satellite 6.11.4 Async Security Update (Important) (RHSA-2022:7242)
The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:7242 advisory. Red Hat Satellite is a system management solution that allows organizations to configure and maintain their systems without the...
8.1CVSS
9.5AI Score
0.003EPSS
RHEL 7 : linux-firmware (RHSA-2024:0753)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:0753 advisory. The linux-firmware packages contain all of the firmware files that are required by various devices to operate. Security Fix(es): *...
6.5CVSS
6.6AI Score
0.0005EPSS
RHEL 6 / 7 : rh-php70-php (RHSA-2019:3724)
The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3724 advisory. php: underflow in env_path_info in fpm_main.c (CVE-2019-11043) Note that Nessus has not tested for this issue but has instead relied only on the...
9.8CVSS
7.4AI Score
0.975EPSS
RHEL 7 : qemu-kvm-rhev (RHSA-2019:3787)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:3787 advisory. KVM (Kernel-based Virtual Machine) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm-rhev packages...
8.8CVSS
8.1AI Score
0.017EPSS
RHEL 7 : redis (RHSA-2019:2621)
The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2019:2621 advisory. Redis is an advanced key-value store. It is often referred to as a data-structure server since keys can contain strings, hashes, lists, sets, and...
7.2CVSS
7.5AI Score
0.188EPSS
RHEL 6 / 7 : httpd24-httpd (RHSA-2019:4126)
The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:4126 advisory. httpd: mod_http2: DoS via slow, unneeded request bodies (CVE-2018-17189) httpd: mod_session_cookie does not respect expiry time...
7.5CVSS
7.1AI Score
0.831EPSS
RHEL 7 : openstack-octavia (RHSA-2019:0593)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:0593 advisory. The OpenStack Load Balancing service (openstack-octavia) provides a Load Balancing-as-a-Service (LBaaS) version 2 implementation for Red Hat...
7.5CVSS
6.4AI Score
0.002EPSS
RHEL 9 : Red Hat OpenStack Platform 17.0 (openstack-neutron) (RHSA-2023:0275)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:0275 advisory. OpenStack Networking (neutron) is a virtual network service for OpenStack. Just as OpenStack Compute (nova) provides an API to dynamically request...
6.5CVSS
5.8AI Score
0.001EPSS
RHEL 9 : Red Hat OpenStack Platform 17.0 (openstack-nova) (RHSA-2023:1015)
The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:1015 advisory. OpenStack Compute (codename Nova) is open source software designed to provision and manage large networks of virtual machines,creating a ...
5.7CVSS
5.7AI Score
0.003EPSS
RHEL 7 / 8 : Red Hat OpenStack Platform (openstack-nova) (RHSA-2023:1278)
The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:1278 advisory. OpenStack Compute (codename Nova) is open source software designed to provision and manage large networks of virtual machines, creating a ...
5.7CVSS
5.7AI Score
0.003EPSS
RHEL 7 : thunderbird (RHSA-2023:1401)
The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2023:1401 advisory. Mozilla: Incorrect code generation during JIT compilation (CVE-2023-25751) Mozilla: Potential out-of-bounds when accessing throttled...
8.8CVSS
8.3AI Score
0.002EPSS
RHEL 7 / 8 : Red Hat OpenStack Platform (openstack-swift) (RHSA-2023:1277)
The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:1277 advisory. OpenStack Object Storage (swift) aggregates commodity servers to work together in clusters for reliable, redundant, and large-scale...
6.5CVSS
6.5AI Score
0.001EPSS
RHEL 7 : firefox (RHSA-2024:0026)
The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:0026 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades...
8.8CVSS
9.5AI Score
0.005EPSS
RHEL 7 : Red Hat OpenStack Platform 12.0 director (RHSA-2018:2331)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:2331 advisory. memcached is a high-performance, distributed memory object caching system, generic in nature, but intended for use in speeding up dynamic web...
7.5CVSS
8AI Score
0.964EPSS
RHEL 7 : qemu-kvm-rhev (RHSA-2018:2258)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:2258 advisory. KVM (Kernel-based Virtual Machine) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm-rhev packages provide...
5.5CVSS
6.3AI Score
0.003EPSS
RHEL 7 : skydive (RHSA-2019:2796)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:2796 advisory. Skydive is an open source real-time network topology and protocols analyzer. Security Fix(es): * HTTP/2: flood using PING frames results in...
7.5CVSS
8.4AI Score
0.821EPSS
RHEL 6 / 7 : python27-python (RHSA-2019:0806)
The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:0806 advisory. python: Information Disclosure due to urlsplit improper NFKC normalization (CVE-2019-9636) Note that Nessus has not tested for this issue but...
9.8CVSS
6.7AI Score
0.007EPSS
RHEL 7 : openstack-ceilometer (RHSA-2019:0566)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:0566 advisory. OpenStack Telemetry (ceilometer) collects customer usage data for metering purposes. Telemetry implements bus listener, push, and polling agents...
7.8CVSS
5.9AI Score
0.0004EPSS
RHEL 7 : rh-git218-git (RHSA-2018:3800)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:3800 advisory. git: Improper handling of PATH allows for commands to be executed from the current directory (CVE-2018-19486) Note that Nessus has not tested...
9.8CVSS
7AI Score
0.024EPSS
RHEL 6 / 7 : rh-perl524-perl (RHSA-2018:1192)
The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:1192 advisory. perl: heap write overflow in regcomp.c (CVE-2018-6797) perl: heap read overflow in regexec.c (CVE-2018-6798) Note that Nessus has...
9.8CVSS
7.5AI Score
0.009EPSS
RHEL 7 : rh-nodejs10-nodejs (RHSA-2019:2939)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:2939 advisory. nodejs: Denial of Service with large HTTP headers (CVE-2018-12121) nodejs: Slowloris HTTP Denial of Service (CVE-2018-12122) nodejs:...
7.5CVSS
7.4AI Score
0.821EPSS
RHEL 7 : qemu-kvm-rhev (RHSA-2019:1202)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:1202 advisory. KVM (Kernel-based Virtual Machine) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm-rhev packages...
5.6CVSS
6.6AI Score
0.001EPSS
RHEL 7 : openstack-aodh (RHSA-2017:3227)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2017:3227 advisory. openstack-aodh provides the ability to trigger actions based on defined rules against metric or event data collected by OpenStack Telemetry...
7.5CVSS
7.3AI Score
0.005EPSS
RHEL 6 / 7 : rh-mysql56-mysql (RHSA-2017:3265)
The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:3265 advisory. mysql: Server: Pluggable Auth unspecified vulnerability (CPU Oct 2017) (CVE-2017-10155) mysql: Server: Optimizer unspecified...
6.5CVSS
7.2AI Score
0.004EPSS
RHEL 7 : openstack-cinder (RHSA-2019:0917)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:0917 advisory. OpenStack Block Storage (cinder) manages block storage mounting and the presentation of such mounted block storage to instances. The backend...
7.5CVSS
6.4AI Score
0.002EPSS
RHEL 7 : qpid-proton (RHSA-2019:1400)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:1400 advisory. qpid-proton: TLS Man in the Middle Vulnerability (CVE-2019-0223) Note that Nessus has not tested for this issue but has instead relied only on the...
7.4CVSS
6.5AI Score
0.002EPSS
RHEL 7 : openstack-neutron (RHSA-2019:0935)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:0935 advisory. OpenStack Networking (neutron) is a pluggable, scalable, and API-driven system that provisions networking services to virtual machines....
6.5CVSS
6.9AI Score
0.004EPSS
RHEL 7 : source-to-image (RHSA-2019:0036)
The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2019:0036 advisory. source-to-image: Improper path sanitization in ExtractTarStreamFromTarReader in tar/tar.go (CVE-2018-1102) Note that Nessus has not tested for this...
8.8CVSS
6.9AI Score
0.004EPSS
RHEL 6 / 7 : rh-ruby23-ruby (RHSA-2018:0585)
The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:0585 advisory. ruby: Buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898) rubygems: Escape sequence in the summary field of gemspec...
9.8CVSS
8.3AI Score
0.895EPSS
RHEL 7 : openstack-tripleo-heat-templates (RHSA-2018:2214)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:2214 advisory. openstack-tripleo-heat-templates is a collection of OpenStack Orchestration templates and tools (codename heat), which can be used to help deploy...
8.8CVSS
8.7AI Score
0.001EPSS
RHEL 6 / 7 : rh-ruby24-ruby (RHSA-2017:3485)
The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:3485 advisory. ruby: Buffer underrun vulnerability in Kernel.sprintf (CVE-2017-0898) rubygems: Escape sequence in the summary field of gemspec...
9.8CVSS
7.6AI Score
0.135EPSS
RHEL 7 : qemu-kvm-rhev (RHSA-2018:2289)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:2289 advisory. KVM (Kernel-based Virtual Machine) is a full virtualization solution for Linux on a variety of architectures. The qemu-kvm-rhev packages provide...
5.5CVSS
6.3AI Score
0.003EPSS
RHEL 7 : Red Hat OpenStack Platform 8 director (RHSA-2018:2857)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:2857 advisory. memcached is a high-performance, distributed memory object caching system, generic in nature, but intended for use in speeding up dynamic web...
7.5CVSS
7.6AI Score
0.964EPSS
RHEL 6 / 7 : rh-postgresql96-postgresql (RHSA-2018:2566)
The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:2566 advisory. postgresql: Memory disclosure in JSON functions (CVE-2017-15098) postgresql: INSERT ... ON CONFLICT DO UPDATE fails to enforce SELECT...
9.1CVSS
7.1AI Score
0.008EPSS
RHEL 7 : openstack-keystone (RHSA-2018:2523)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:2523 advisory. The OpenStack Identity service (keystone) authenticates and authorizes OpenStack users by keeping track of users and their permitted activities....
5.3CVSS
5.4AI Score
0.001EPSS
RHEL 7 : openstack-octavia (RHSA-2019:0567)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:0567 advisory. The OpenStack Load Balancing service (openstack-octavia) provides a Load Balancing-as-a-Service (LBaaS) version 2 implementation for Red Hat...
7.5CVSS
6.6AI Score
0.002EPSS
RHEL 7 : rh-php71-php (RHSA-2019:3300)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3300 advisory. php: underflow in env_path_info in fpm_main.c (CVE-2019-11043) Note that Nessus has not tested for this issue but has instead relied only on the...
9.8CVSS
7.4AI Score
0.975EPSS
RHEL 7 : python-django (RHSA-2019:0082)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:0082 advisory. Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as...
5.3CVSS
5.8AI Score
0.008EPSS
RHEL 7 : rh-postgresql10-postgresql (RHSA-2018:2565)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:2565 advisory. postgresql: Too-permissive access control list on function pg_logfile_rotate() (CVE-2018-1115) postgresql: Certain host connection...
9.1CVSS
7.2AI Score
0.007EPSS