[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fNscsKPLk8JGwau7fVW6PL97ogJZZmhPlpf_rb_4it0s":3,"g5a-family:redhat\u002Fenterprise_linux_eus":488,"g5a-ex:redhat\u002Fenterprise_linux_eus@*":491},{"success":4,"data":5},true,{"product":6,"versions":117,"topVulnerabilitiesByEpss":154,"kevVulnerabilities":210,"seoMetadata":466,"meta":485},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":116},"redhat","enterprise_linux_eus",36,783,38,"2025-06-12",[14,19,22,24,27,30,32,34,37,40,43,45,49,51,54,57,60,63,66,68,71,74,77,80,84,87,89,92,95,98,101,104,107,109,112,114],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"10.0",1,0,false,{"version":20,"cve_count":21,"kev_count":17,"has_kev":18},"4.5",3,{"version":23,"cve_count":16,"kev_count":17,"has_kev":18},"4.6",{"version":25,"cve_count":26,"kev_count":17,"has_kev":18},"4.7",5,{"version":28,"cve_count":29,"kev_count":17,"has_kev":18},"4.8",4,{"version":31,"cve_count":16,"kev_count":17,"has_kev":18},"5",{"version":33,"cve_count":21,"kev_count":17,"has_kev":18},"5.2",{"version":35,"cve_count":36,"kev_count":17,"has_kev":18},"5.3",6,{"version":38,"cve_count":39,"kev_count":17,"has_kev":18},"5.4",7,{"version":41,"cve_count":42,"kev_count":16,"has_kev":4},"5.6",17,{"version":44,"cve_count":16,"kev_count":17,"has_kev":18},"5.6.z",{"version":46,"cve_count":47,"kev_count":48,"has_kev":4},"5.9",48,9,{"version":50,"cve_count":16,"kev_count":17,"has_kev":18},"5.9.z",{"version":52,"cve_count":53,"kev_count":16,"has_kev":4},"6.1",2,{"version":55,"cve_count":56,"kev_count":21,"has_kev":4},"6.2",21,{"version":58,"cve_count":59,"kev_count":53,"has_kev":4},"6.3",108,{"version":61,"cve_count":47,"kev_count":62,"has_kev":4},"6.4",10,{"version":64,"cve_count":65,"kev_count":29,"has_kev":4},"6.5",54,{"version":67,"cve_count":42,"kev_count":26,"has_kev":4},"6.6",{"version":69,"cve_count":70,"kev_count":48,"has_kev":4},"6.7",20,{"version":72,"cve_count":73,"kev_count":21,"has_kev":4},"7.1",28,{"version":75,"cve_count":76,"kev_count":36,"has_kev":4},"7.2",53,{"version":78,"cve_count":79,"kev_count":48,"has_kev":4},"7.3",117,{"version":81,"cve_count":82,"kev_count":83,"has_kev":4},"7.4",175,11,{"version":85,"cve_count":86,"kev_count":83,"has_kev":4},"7.5",198,{"version":88,"cve_count":86,"kev_count":48,"has_kev":4},"7.6",{"version":90,"cve_count":91,"kev_count":62,"has_kev":4},"7.7",210,{"version":93,"cve_count":94,"kev_count":21,"has_kev":4},"8.1",192,{"version":96,"cve_count":97,"kev_count":26,"has_kev":4},"8.2",177,{"version":99,"cve_count":100,"kev_count":26,"has_kev":4},"8.4",180,{"version":102,"cve_count":103,"kev_count":26,"has_kev":4},"8.6",174,{"version":105,"cve_count":106,"kev_count":21,"has_kev":4},"8.8",31,{"version":108,"cve_count":70,"kev_count":17,"has_kev":18},"9.0",{"version":110,"cve_count":111,"kev_count":16,"has_kev":4},"9.2",39,{"version":113,"cve_count":42,"kev_count":16,"has_kev":4},"9.4",{"version":115,"cve_count":29,"kev_count":17,"has_kev":18},"9.6","Enterprise Linux Eus by Redhat is a technology product with 36 tracked versions and 783 known security vulnerabilities including 38 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":21,"kev_count":17,"has_kev":18},{"version":23,"cve_count":16,"kev_count":17,"has_kev":18},{"version":25,"cve_count":26,"kev_count":17,"has_kev":18},{"version":28,"cve_count":29,"kev_count":17,"has_kev":18},{"version":31,"cve_count":16,"kev_count":17,"has_kev":18},{"version":33,"cve_count":21,"kev_count":17,"has_kev":18},{"version":35,"cve_count":36,"kev_count":17,"has_kev":18},{"version":38,"cve_count":39,"kev_count":17,"has_kev":18},{"version":41,"cve_count":42,"kev_count":16,"has_kev":4},{"version":44,"cve_count":16,"kev_count":17,"has_kev":18},{"version":46,"cve_count":47,"kev_count":48,"has_kev":4},{"version":50,"cve_count":16,"kev_count":17,"has_kev":18},{"version":52,"cve_count":53,"kev_count":16,"has_kev":4},{"version":55,"cve_count":56,"kev_count":21,"has_kev":4},{"version":58,"cve_count":59,"kev_count":53,"has_kev":4},{"version":61,"cve_count":47,"kev_count":62,"has_kev":4},{"version":64,"cve_count":65,"kev_count":29,"has_kev":4},{"version":67,"cve_count":42,"kev_count":26,"has_kev":4},{"version":69,"cve_count":70,"kev_count":48,"has_kev":4},{"version":72,"cve_count":73,"kev_count":21,"has_kev":4},{"version":75,"cve_count":76,"kev_count":36,"has_kev":4},{"version":78,"cve_count":79,"kev_count":48,"has_kev":4},{"version":81,"cve_count":82,"kev_count":83,"has_kev":4},{"version":85,"cve_count":86,"kev_count":83,"has_kev":4},{"version":88,"cve_count":86,"kev_count":48,"has_kev":4},{"version":90,"cve_count":91,"kev_count":62,"has_kev":4},{"version":93,"cve_count":94,"kev_count":21,"has_kev":4},{"version":96,"cve_count":97,"kev_count":26,"has_kev":4},{"version":99,"cve_count":100,"kev_count":26,"has_kev":4},{"version":102,"cve_count":103,"kev_count":26,"has_kev":4},{"version":105,"cve_count":106,"kev_count":21,"has_kev":4},{"version":108,"cve_count":70,"kev_count":17,"has_kev":18},{"version":110,"cve_count":111,"kev_count":16,"has_kev":4},{"version":113,"cve_count":42,"kev_count":16,"has_kev":4},{"version":115,"cve_count":29,"kev_count":17,"has_kev":18},[155,162,167,172,179,184,189,194,200,205],{"cveId":156,"description":157,"publishedDate":158,"cvssScore":48,"cvssVersion":159,"severity":160,"isKev":4,"epssScore":161},"CVE-2021-40438","A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.","2021-09-16","v3.1","Critical",0.99999,{"cveId":163,"description":164,"publishedDate":165,"cvssScore":166,"cvssVersion":159,"severity":160,"isKev":4,"epssScore":161},"CVE-2014-6271","GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka \"ShellShock.\"  NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix.","2014-09-24",9.8,{"cveId":168,"description":169,"publishedDate":170,"cvssScore":166,"cvssVersion":159,"severity":160,"isKev":4,"epssScore":171},"CVE-2012-1823","sapi\u002Fcgi\u002Fcgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'd' case.","2012-05-11",0.99998,{"cveId":173,"description":174,"publishedDate":175,"cvssScore":176,"cvssVersion":159,"severity":177,"isKev":4,"epssScore":178},"CVE-2017-12617","When running Apache Tomcat versions 9.0.0.M1 to 9.0.0, 8.5.0 to 8.5.22, 8.0.0.RC1 to 8.0.46 and 7.0.0 to 7.0.81 with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default servlet to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.","2017-10-04",8.1,"High",0.99968,{"cveId":180,"description":181,"publishedDate":182,"cvssScore":166,"cvssVersion":159,"severity":160,"isKev":4,"epssScore":183},"CVE-2014-7169","GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown other impact via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-6271.","2014-09-25",0.9994,{"cveId":185,"description":186,"publishedDate":187,"cvssScore":166,"cvssVersion":159,"severity":160,"isKev":4,"epssScore":188},"CVE-2014-0497","Integer underflow in Adobe Flash Player before 11.7.700.261 and 11.8.x through 12.0.x before 12.0.0.44 on Windows and Mac OS X, and before 11.2.202.336 on Linux, allows remote attackers to execute arbitrary code via unspecified vectors.","2014-02-05",0.99879,{"cveId":190,"description":191,"publishedDate":192,"cvssScore":166,"cvssVersion":159,"severity":160,"isKev":4,"epssScore":193},"CVE-2015-3113","Heap-based buffer overflow in Adobe Flash Player before 13.0.0.296 and 14.x through 18.x before 18.0.0.194 on Windows and OS X and before 11.2.202.468 on Linux allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in June 2015.","2015-06-23",0.99812,{"cveId":195,"description":196,"publishedDate":197,"cvssScore":198,"cvssVersion":159,"severity":177,"isKev":4,"epssScore":199},"CVE-2019-11043","In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buffers into the space reserved for FCGI protocol data, thus opening the possibility of remote code execution.","2019-10-28",8.7,0.99748,{"cveId":201,"description":202,"publishedDate":203,"cvssScore":176,"cvssVersion":159,"severity":177,"isKev":4,"epssScore":204},"CVE-2017-12615","When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.","2017-09-19",0.99641,{"cveId":206,"description":207,"publishedDate":208,"cvssScore":176,"cvssVersion":159,"severity":177,"isKev":18,"epssScore":209},"CVE-2024-6387","A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauthenticated, remote attacker may be able to trigger it by failing to authenticate within a set time period.","2024-07-01",0.99506,[211,221,231,237,240,247,256,267,275,283,291,299,307,315,323,327,336,343,350,354,357,360,363,370,377,383,390,397,404,410,418,425,431,437,440,442,445,453,459],{"cveId":212,"description":213,"publishedDate":214,"cvssScore":215,"severity":177,"isKev":4,"epssScore":216,"cisaVulnName":217,"cisaDateAdded":218,"cisaShortDescription":219,"cisaRequiredAction":220},"CVE-2022-0492","A vulnerability was found in the Linux kernel’s cgroup_release_agent_write in the kernel\u002Fcgroup\u002Fcgroup-v1.c function. This flaw, under certain circumstances, allows the use of the cgroups v1 release_agent feature to escalate privileges and bypass the namespace isolation unexpectedly.","2022-03-03",7.8,0.05528,"Linux Kernel Improper Authentication Vulnerability","2026-06-02","Linux Kernel contains an improper authentication vulnerability which could allow for privilege escalation via the cgroups v1 release_agent feature.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":222,"description":223,"publishedDate":224,"cvssScore":225,"severity":177,"isKev":4,"epssScore":226,"cisaVulnName":227,"cisaDateAdded":228,"cisaShortDescription":229,"cisaRequiredAction":230},"CVE-2013-0643","The Firefox sandbox in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202.273 on Linux, does not properly restrict privileges, which makes it easier for remote attackers to execute arbitrary code via crafted SWF content, as exploited in the wild in February 2013.","2013-02-27",8.8,0.10533,"Adobe Flash Player Incorrect Default Permissions Vulnerability","2024-09-17","Adobe Flash Player contains an incorrect default permissions vulnerability in the Firefox sandbox that allows a remote attacker to execute arbitrary code via crafted SWF content. ","The impacted product is end-of-life (EoL) and\u002For end-of-service (EoS). Users should discontinue utilization of the product.",{"cveId":232,"description":233,"publishedDate":224,"cvssScore":225,"severity":177,"isKev":4,"epssScore":234,"cisaVulnName":235,"cisaDateAdded":228,"cisaShortDescription":236,"cisaRequiredAction":230},"CVE-2013-0648","Unspecified vulnerability in the ExternalInterface ActionScript functionality in Adobe Flash Player before 10.3.183.67 and 11.x before 11.6.602.171 on Windows and Mac OS X, and before 10.3.183.67 and 11.x before 11.2.202.273 on Linux, allows remote attackers to execute arbitrary code via crafted SWF content, as exploited in the wild in February 2013.",0.11094,"Adobe Flash Player Code Execution Vulnerability","Adobe Flash Player contains an unspecified vulnerability in the ExternalInterface ActionScript functionality that allows a remote attacker to execute arbitrary code via crafted SWF content.",{"cveId":185,"description":186,"publishedDate":187,"cvssScore":166,"severity":160,"isKev":4,"epssScore":188,"cisaVulnName":238,"cisaDateAdded":228,"cisaShortDescription":239,"cisaRequiredAction":230},"Adobe Flash Player Integer Underflow Vulnerablity","Adobe Flash Player contains an integer underflow vulnerability that allows a remote attacker to execute arbitrary code.",{"cveId":241,"description":242,"publishedDate":243,"cvssScore":225,"severity":177,"isKev":4,"epssScore":244,"cisaVulnName":245,"cisaDateAdded":228,"cisaShortDescription":246,"cisaRequiredAction":230},"CVE-2014-0502","Double free vulnerability in Adobe Flash Player before 11.7.700.269 and 11.8.x through 12.0.x before 12.0.0.70 on Windows and Mac OS X and before 11.2.202.341 on Linux, Adobe AIR before 4.0.0.1628 on Android, Adobe AIR SDK before 4.0.0.1628, and Adobe AIR SDK & Compiler before 4.0.0.1628 allows remote attackers to execute arbitrary code via unspecified vectors, as exploited in the wild in February 2014.","2014-02-21",0.24817,"Adobe Flash Player Double Free Vulnerablity","Adobe Flash Player contains a double free vulnerability that allows a remote attacker to execute arbitrary code.",{"cveId":248,"description":249,"publishedDate":250,"cvssScore":215,"severity":177,"isKev":4,"epssScore":251,"cisaVulnName":252,"cisaDateAdded":253,"cisaShortDescription":254,"cisaRequiredAction":255},"CVE-2023-4911","A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.","2023-10-03",0.63769,"GNU C Library Buffer Overflow Vulnerability","2023-11-21","GNU C Library's dynamic loader ld.so contains a buffer overflow vulnerability when processing the GLIBC_TUNABLES environment variable, allowing a local attacker to execute code with elevated privileges.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"cveId":257,"description":258,"publishedDate":259,"cvssScore":260,"severity":261,"isKev":4,"epssScore":262,"cisaVulnName":263,"cisaDateAdded":264,"cisaShortDescription":265,"cisaRequiredAction":266},"CVE-2014-0196","The n_tty_write function in drivers\u002Ftty\u002Fn_tty.c in the Linux kernel through 3.14.3 does not properly manage tty driver access in the \"LECHO & !OPOST\" case, which allows local users to cause a denial of service (memory corruption and system crash) or gain privileges by triggering a race condition involving read and write operations with long strings.","2014-05-07",5.5,"Medium",0.22475,"Linux Kernel Race Condition Vulnerability","2023-05-12","Linux Kernel contains a race condition vulnerability within the n_tty_write function that allows local users to cause a denial-of-service (DoS) or gain privileges via read and write operations with long strings.","The impacted product is end-of-life and should be disconnected if still in use.",{"cveId":268,"description":269,"publishedDate":270,"cvssScore":166,"severity":160,"isKev":4,"epssScore":271,"cisaVulnName":272,"cisaDateAdded":264,"cisaShortDescription":273,"cisaRequiredAction":274},"CVE-2016-3427","Unspecified vulnerability in Oracle Java SE 6u113, 7u99, and 8u77; Java SE Embedded 8u77; and JRockit R28.3.9 allows remote attackers to affect confidentiality, integrity, and availability via vectors related to JMX.","2016-04-21",0.92334,"Oracle Java SE and JRockit Unspecified Vulnerability","Oracle Java SE and JRockit contains an unspecified vulnerability that allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Java Management Extensions (JMX). This vulnerability can be exploited through sandboxed Java Web Start applications and sandboxed Java applets. It can also be exploited by supplying data to APIs in the specified component without using sandboxed Java Web Start applications or sandboxed Java applets, such as through a web service.","Apply updates per vendor instructions.",{"cveId":276,"description":277,"publishedDate":278,"cvssScore":215,"severity":177,"isKev":4,"epssScore":279,"cisaVulnName":280,"cisaDateAdded":281,"cisaShortDescription":282,"cisaRequiredAction":274},"CVE-2021-4034","A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully executed the attack can cause a local privilege escalation given unprivileged users administrative rights on the target machine.","2022-01-28",0.94921,"Red Hat Polkit Out-of-Bounds Read and Write Vulnerability","2022-06-27","The Red Hat polkit pkexec utility contains an out-of-bounds read and write vulnerability that allows for privilege escalation with administrative rights.",{"cveId":284,"description":285,"publishedDate":286,"cvssScore":225,"severity":177,"isKev":4,"epssScore":287,"cisaVulnName":288,"cisaDateAdded":289,"cisaShortDescription":290,"cisaRequiredAction":274},"CVE-2016-1646","The Array.prototype.concat implementation in builtins.cc in Google V8, as used in Google Chrome before 49.0.2623.108, does not properly consider element data types, which allows remote attackers to cause a denial of service (out-of-bounds read) or possibly have unspecified other impact via crafted JavaScript code.","2016-03-29",0.4811,"Google Chromium V8 Out-of-Bounds Read Vulnerability","2022-06-08","Google Chromium V8 Engine contains an out-of-bounds read vulnerability that allows a remote attacker to cause a denial of service or possibly have another unspecified impact via crafted JavaScript code. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.",{"cveId":292,"description":293,"publishedDate":294,"cvssScore":225,"severity":177,"isKev":4,"epssScore":295,"cisaVulnName":296,"cisaDateAdded":297,"cisaShortDescription":298,"cisaRequiredAction":274},"CVE-2015-4495","The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x before 38.1.1, and Firefox OS before 2.2 allows remote attackers to bypass the Same Origin Policy, and read arbitrary files or gain privileges, via vectors involving crafted JavaScript code and a native setter, as exploited in the wild in August 2015.","2015-08-08",0.68558,"Mozilla Firefox Security Feature Bypass Vulnerability","2022-05-25","Moxilla Firefox allows remote attackers to bypass the Same Origin Policy to read arbitrary files or gain privileges.",{"cveId":300,"description":301,"publishedDate":302,"cvssScore":215,"severity":177,"isKev":4,"epssScore":303,"cisaVulnName":304,"cisaDateAdded":305,"cisaShortDescription":306,"cisaRequiredAction":274},"CVE-2017-8291","Artifex Ghostscript through 2017-04-26 allows -dSAFER bypass and remote command execution via .rsdparams type confusion with a \"\u002FOutputFile (%pipe%\" substring in a crafted .eps document that is an input to the gs program, as exploited in the wild in April 2017.","2017-04-27",0.96968,"Artifex Ghostscript Type Confusion Vulnerability","2022-05-24","Artifex Ghostscript allows -dSAFER bypass and remote command execution via .rsdparams type confusion with a \"\u002FOutputFile.",{"cveId":308,"description":309,"publishedDate":310,"cvssScore":225,"severity":177,"isKev":4,"epssScore":311,"cisaVulnName":312,"cisaDateAdded":313,"cisaShortDescription":314,"cisaRequiredAction":274},"CVE-2019-8720","A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code execution. Improved memory handling addresses the multiple memory corruption issues.","2023-03-06",0.01556,"WebKitGTK Memory Corruption Vulnerability","2022-05-23","WebKitGTK contains a memory corruption vulnerability which can allow an attacker to perform remote code execution.",{"cveId":316,"description":317,"publishedDate":318,"cvssScore":215,"severity":177,"isKev":4,"epssScore":319,"cisaVulnName":320,"cisaDateAdded":321,"cisaShortDescription":322,"cisaRequiredAction":274},"CVE-2022-0847","A flaw was found in the way the \"flags\" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use this flaw to write to pages in the page cache backed by read only files and as such escalate their privileges on the system.","2022-03-10",0.92795,"Linux Kernel Privilege Escalation Vulnerability","2022-04-25","Linux kernel contains an improper initialization vulnerability where an unprivileged local user could escalate their privileges on the system. This vulnerability has the moniker of \"Dirty Pipe.\"",{"cveId":190,"description":191,"publishedDate":192,"cvssScore":166,"severity":160,"isKev":4,"epssScore":193,"cisaVulnName":324,"cisaDateAdded":325,"cisaShortDescription":326,"cisaRequiredAction":266},"Adobe Flash Player Heap-Based Buffer Overflow Vulnerability","2022-04-13","Heap-based buffer overflow vulnerability in Adobe Flash Player allows remote attackers to execute code.",{"cveId":328,"description":329,"publishedDate":330,"cvssScore":331,"severity":177,"isKev":4,"epssScore":332,"cisaVulnName":333,"cisaDateAdded":334,"cisaShortDescription":335,"cisaRequiredAction":266},"CVE-2012-2034","Adobe Flash Player before 10.3.183.20 and 11.x before 11.3.300.257 on Windows and Mac OS X; before 10.3.183.20 and 11.x before 11.2.202.236 on Linux; before 11.1.111.10 on Android 2.x and 3.x; and before 11.1.115.9 on Android 4.x, and Adobe AIR before 3.3.0.3610, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2012-2037.","2012-06-09",7.5,0.07713,"Adobe Flash Player Memory Corruption Vulnerability","2022-03-28","Adobe Flash Player contains a memory corruption vulnerability that allows for remote code execution or denial-of-service (DoS).",{"cveId":337,"description":338,"publishedDate":339,"cvssScore":166,"severity":160,"isKev":4,"epssScore":340,"cisaVulnName":341,"cisaDateAdded":334,"cisaShortDescription":342,"cisaRequiredAction":274},"CVE-2013-2729","Integer overflow in Adobe Reader and Acrobat 9.x before 9.5.5, 10.x before 10.1.7, and 11.x before 11.0.03 allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2013-2727.","2013-05-16",0.66555,"Adobe Reader and Acrobat Arbitrary Integer Overflow Vulnerability","Integer overflow vulnerability in Adobe Reader and Acrobat allows attackers to execute remote code.",{"cveId":344,"description":345,"publishedDate":346,"cvssScore":225,"severity":177,"isKev":4,"epssScore":347,"cisaVulnName":348,"cisaDateAdded":334,"cisaShortDescription":349,"cisaRequiredAction":274},"CVE-2013-1690","Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbird before 17.0.7, and Thunderbird ESR 17.x before 17.0.7 do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted web site that triggers an attempt to execute data at an unmapped memory location.","2013-06-26",0.69021,"Mozilla Firefox and Thunderbird Denial-of-Service Vulnerability","Mozilla Firefox and Thunderbird do not properly handle onreadystatechange events in conjunction with page reloading, which allows remote attackers to cause a denial-of-service (DoS) or possibly execute malicious code via a crafted web site.",{"cveId":168,"description":169,"publishedDate":170,"cvssScore":166,"severity":160,"isKev":4,"epssScore":171,"cisaVulnName":351,"cisaDateAdded":352,"cisaShortDescription":353,"cisaRequiredAction":274},"PHP-CGI Query String Parameter Vulnerability","2022-03-25","sapi\u002Fcgi\u002Fcgi_main.c in PHP, when configured as a CGI script, does not properly handle query strings, which allows remote attackers to execute arbitrary code.",{"cveId":201,"description":202,"publishedDate":203,"cvssScore":176,"severity":177,"isKev":4,"epssScore":204,"cisaVulnName":355,"cisaDateAdded":352,"cisaShortDescription":356,"cisaRequiredAction":274},"Apache Tomcat on Windows Remote Code Execution Vulnerability","When running Apache Tomcat on Windows with HTTP PUTs enabled, it is possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.",{"cveId":173,"description":174,"publishedDate":175,"cvssScore":176,"severity":177,"isKev":4,"epssScore":178,"cisaVulnName":358,"cisaDateAdded":352,"cisaShortDescription":359,"cisaRequiredAction":274},"Apache Tomcat Remote Code Execution Vulnerability","When running Apache Tomcat, it is possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.",{"cveId":195,"description":196,"publishedDate":197,"cvssScore":198,"severity":177,"isKev":4,"epssScore":199,"cisaVulnName":361,"cisaDateAdded":352,"cisaShortDescription":362,"cisaRequiredAction":274},"PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability","In some versions of PHP in certain configurations of FPM setup, it is possible to cause FPM module to write past allocated buffers allowing the possibility of remote code execution.",{"cveId":364,"description":365,"publishedDate":366,"cvssScore":166,"severity":160,"isKev":4,"epssScore":367,"cisaVulnName":368,"cisaDateAdded":214,"cisaShortDescription":369,"cisaRequiredAction":266},"CVE-2015-5119","Use-after-free vulnerability in the ByteArray class in the ActionScript 3 (AS3) implementation in Adobe Flash Player 13.x through 13.0.0.296 and 14.x through 18.0.0.194 on Windows and OS X and 11.x through 11.2.202.468 on Linux allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via crafted Flash content that overrides a valueOf function, as exploited in the wild in July 2015.","2015-07-08",0.99344,"Adobe Flash Player Use-After-Free Vulnerability","A use-after-free vulnerability exists within the ActionScript 3 ByteArray class in Adobe Flash Player that allows an attacker to perform remote code execution.",{"cveId":371,"description":372,"publishedDate":373,"cvssScore":215,"severity":177,"isKev":4,"epssScore":374,"cisaVulnName":375,"cisaDateAdded":214,"cisaShortDescription":376,"cisaRequiredAction":274},"CVE-2013-0641","Buffer overflow in Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allows remote attackers to execute arbitrary code via a crafted PDF document, as exploited in the wild in February 2013.","2013-02-14",0.32346,"Adobe Reader Buffer Overflow Vulnerability","A buffer overflow vulnerability exists in Adobe Reader which allows an attacker to perform remote code execution.",{"cveId":378,"description":379,"publishedDate":373,"cvssScore":215,"severity":177,"isKev":4,"epssScore":380,"cisaVulnName":381,"cisaDateAdded":214,"cisaShortDescription":382,"cisaRequiredAction":274},"CVE-2013-0640","Adobe Reader and Acrobat 9.x before 9.5.4, 10.x before 10.1.6, and 11.x before 11.0.02 allow remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted PDF document, as exploited in the wild in February 2013.",0.86927,"Adobe Reader and Acrobat Memory Corruption Vulnerability","An memory corruption vulnerability exists in the acroform.dll in Adobe Reader that allows an attacker to perform remote code execution.",{"cveId":384,"description":385,"publishedDate":339,"cvssScore":386,"severity":261,"isKev":4,"epssScore":387,"cisaVulnName":388,"cisaDateAdded":214,"cisaShortDescription":389,"cisaRequiredAction":274},"CVE-2013-1675","Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 do not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.",6.5,0.06696,"Mozilla Firefox Information Disclosure Vulnerability","Mozilla Firefox does not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.",{"cveId":391,"description":392,"publishedDate":393,"cvssScore":166,"severity":160,"isKev":4,"epssScore":394,"cisaVulnName":395,"cisaDateAdded":214,"cisaShortDescription":396,"cisaRequiredAction":274},"CVE-2015-2590","Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45, and Java SE Embedded 7u75 and 8u33 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Libraries, a different vulnerability than CVE-2015-4732.","2015-07-16",0.25469,"Oracle Java SE and Java SE Embedded Remote Code Execution Vulnerability","An unspecified vulnerability exists within Oracle Java Runtime Environment that allows an attacker to perform remote code execution.",{"cveId":398,"description":399,"publishedDate":400,"cvssScore":166,"severity":160,"isKev":4,"epssScore":401,"cisaVulnName":402,"cisaDateAdded":214,"cisaShortDescription":403,"cisaRequiredAction":274},"CVE-2012-4681","Multiple vulnerabilities in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 6 and earlier allow remote attackers to execute arbitrary code via a crafted applet that bypasses SecurityManager restrictions by (1) using com.sun.beans.finder.ClassFinder.findClass and leveraging an exception with the forName method to access restricted classes from arbitrary packages such as sun.awt.SunToolkit, then (2) using \"reflection with a trusted immediate caller\" to leverage the getField method to access and modify private fields, as exploited in the wild in August 2012 using Gondzz.class and Gondvv.class.","2012-08-28",0.98536,"Oracle Java SE Runtime Environment (JRE) Arbitrary Code Execution Vulnerability","The Java Runtime Environment (JRE) component in Oracle Java SE allow for remote code execution.",{"cveId":405,"description":406,"publishedDate":407,"cvssScore":166,"severity":160,"isKev":4,"epssScore":408,"cisaVulnName":402,"cisaDateAdded":214,"cisaShortDescription":409,"cisaRequiredAction":274},"CVE-2012-1723","Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 update 4 and earlier, 6 update 32 and earlier, 5 update 35 and earlier, and 1.4.2_37 and earlier allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Hotspot.","2012-06-16",0.93688,"Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE allows remote attackers to affect confidentiality, integrity, and availability via Unknown vectors related to Hotspot.",{"cveId":411,"description":412,"publishedDate":413,"cvssScore":414,"severity":261,"isKev":4,"epssScore":415,"cisaVulnName":416,"cisaDateAdded":214,"cisaShortDescription":417,"cisaRequiredAction":274},"CVE-2015-4902","Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment.","2015-10-22",5.3,0.13603,"Oracle Java SE Integrity Check Vulnerability","Unspecified vulnerability in Oracle Java SE allows remote attackers to affect integrity via Unknown vectors related to deployment.",{"cveId":419,"description":420,"publishedDate":421,"cvssScore":215,"severity":177,"isKev":4,"epssScore":422,"cisaVulnName":423,"cisaDateAdded":214,"cisaShortDescription":424,"cisaRequiredAction":266},"CVE-2015-7645","Adobe Flash Player 18.x through 18.0.0.252 and 19.x through 19.0.0.207 on Windows and OS X and 11.x through 11.2.202.535 on Linux allows remote attackers to execute arbitrary code via a crafted SWF file, as exploited in the wild in October 2015.","2015-10-15",0.65339,"Adobe Flash Player Arbitrary Code Execution Vulnerability","Adobe Flash Player allows remote attackers to execute arbitrary code via a crafted SWF file.",{"cveId":426,"description":427,"publishedDate":428,"cvssScore":39,"severity":177,"isKev":4,"epssScore":429,"cisaVulnName":263,"cisaDateAdded":214,"cisaShortDescription":430,"cisaRequiredAction":274},"CVE-2016-5195","Race condition in mm\u002Fgup.c in the Linux kernel 2.x through 4.x before 4.8.3 allows local users to gain privileges by leveraging incorrect handling of a copy-on-write (COW) feature to write to a read-only memory mapping, as exploited in the wild in October 2016, aka \"Dirty COW.\"","2016-11-10",0.83524,"Race condition in mm\u002Fgup.c in the Linux kernel allows local users to escalate privileges.",{"cveId":432,"description":433,"publishedDate":434,"cvssScore":166,"severity":160,"isKev":4,"epssScore":435,"cisaVulnName":333,"cisaDateAdded":214,"cisaShortDescription":436,"cisaRequiredAction":266},"CVE-2015-3043","Adobe Flash Player before 13.0.0.281 and 14.x through 17.x before 17.0.0.169 on Windows and OS X and before 11.2.202.457 on Linux allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in April 2015, a different vulnerability than CVE-2015-0347, CVE-2015-0350, CVE-2015-0352, CVE-2015-0353, CVE-2015-0354, CVE-2015-0355, CVE-2015-0360, CVE-2015-3038, CVE-2015-3041, and CVE-2015-3042.","2015-04-14",0.73862,"A memory corruption vulnerability exists in Adobe Flash Player that allows an attacker to perform remote code execution.",{"cveId":180,"description":181,"publishedDate":182,"cvssScore":166,"severity":160,"isKev":4,"epssScore":183,"cisaVulnName":438,"cisaDateAdded":278,"cisaShortDescription":439,"cisaRequiredAction":274},"GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability","GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code. This CVE correctly remediates the vulnerability in CVE-2014-6271.",{"cveId":163,"description":164,"publishedDate":165,"cvssScore":166,"severity":160,"isKev":4,"epssScore":161,"cisaVulnName":438,"cisaDateAdded":278,"cisaShortDescription":441,"cisaRequiredAction":274},"GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code.",{"cveId":156,"description":157,"publishedDate":158,"cvssScore":48,"severity":160,"isKev":4,"epssScore":161,"cisaVulnName":443,"cisaDateAdded":444,"cisaShortDescription":157,"cisaRequiredAction":274},"Apache HTTP Server-Side Request Forgery (SSRF)","2021-12-01",{"cveId":446,"description":447,"publishedDate":448,"cvssScore":260,"severity":261,"isKev":4,"epssScore":449,"cisaVulnName":450,"cisaDateAdded":451,"cisaShortDescription":452,"cisaRequiredAction":274},"CVE-2016-3715","The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.","2016-05-05",0.75307,"ImageMagick Arbitrary File Deletion Vulnerability","2021-11-03","ImageMagick contains an unspecified vulnerability that could allow users to delete files by using ImageMagick's 'ephemeral' pseudo protocol, which deletes files after reading.",{"cveId":454,"description":455,"publishedDate":448,"cvssScore":260,"severity":261,"isKev":4,"epssScore":456,"cisaVulnName":457,"cisaDateAdded":451,"cisaShortDescription":458,"cisaRequiredAction":274},"CVE-2016-3718","The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image.",0.7565,"ImageMagick Server-Side Request Forgery (SSRF) Vulnerability","ImageMagick contains an unspecified vulnerability that allows attackers to perform server-side request forgery (SSRF) via a crafted image.",{"cveId":460,"description":461,"publishedDate":462,"cvssScore":215,"severity":177,"isKev":4,"epssScore":463,"cisaVulnName":464,"cisaDateAdded":451,"cisaShortDescription":465,"cisaRequiredAction":274},"CVE-2019-0211","In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute arbitrary code with the privileges of the parent process (usually root) by manipulating the scoreboard. Non-Unix systems are not affected.","2019-04-08",0.65005,"Apache HTTP Server Privilege Escalation Vulnerability","Apache HTTP Server, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute code with the privileges of the parent process (usually root) by manipulating the scoreboard.",{"title":467,"metaDescription":468,"keywords":469,"structuredData":470},"Enterprise Linux Eus by Redhat - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Enterprise Linux Eus by Redhat covering 36 versions with 783 tracked vulnerabilities including 13 critical and 21 high-severity issues and 38 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Enterprise Linux Eus vulnerabilities, Enterprise Linux Eus security, Enterprise Linux Eus CVE, Redhat Enterprise Linux Eus, Enterprise Linux Eus threat intelligence, Redhat security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Enterprise Linux Eus KEV, Enterprise Linux Eus exploited vulnerabilities",{"@context":471,"@type":472,"name":473,"description":468,"url":474,"manufacturer":475,"applicationCategory":479,"softwareVersion":480,"mainEntity":481},"https:\u002F\u002Fschema.org","SoftwareApplication","Enterprise Linux Eus","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fredhat\u002Fenterprise_linux_eus",{"@type":476,"name":477,"url":478},"Organization","Redhat","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fredhat","Security Software","36 versions tracked",{"@type":482,"name":483,"description":484,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Enterprise Linux Eus Security Vulnerabilities","Security vulnerabilities affecting Enterprise Linux Eus by Redhat",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":486,"apiVersion":487},"2026-10-17T11:48:12.555Z","3.0",[489],{"product":490,"cves":26},"enterprise_linux_eus_compute_node",{"rows":492,"total":111,"capped":4,"failed":17},[493,497,501,505,509,513,517,521,525,529,533,537,541,545,549,553,557,561,565,569,573,577,581,585,589,593,597,601,605,609],{"cveId":212,"name":217,"severity":177,"cvss":215,"added":218,"epss":216,"published":494,"ranges":495,"checked":4,"hits":496,"covers":18},"2022-03-03T19:15:08.633",[96],[],{"cveId":222,"name":227,"severity":177,"cvss":225,"added":228,"epss":226,"published":498,"ranges":499,"checked":4,"hits":500,"covers":18},"2013-02-27T00:55:01.017",[46,61],[],{"cveId":232,"name":235,"severity":177,"cvss":225,"added":228,"epss":234,"published":502,"ranges":503,"checked":4,"hits":504,"covers":18},"2013-02-27T00:55:01.16",[46,61],[],{"cveId":185,"name":238,"severity":160,"cvss":166,"added":228,"epss":188,"published":506,"ranges":507,"checked":4,"hits":508,"covers":18},"2014-02-05T05:15:29.897",[64],[],{"cveId":241,"name":245,"severity":177,"cvss":225,"added":228,"epss":244,"published":510,"ranges":511,"checked":4,"hits":512,"covers":18},"2014-02-21T05:07:00.017",[64],[],{"cveId":248,"name":252,"severity":177,"cvss":215,"added":253,"epss":251,"published":514,"ranges":515,"checked":4,"hits":516,"covers":18},"2023-10-03T18:15:10.463",[102,110,113],[],{"cveId":257,"name":263,"severity":261,"cvss":260,"added":264,"epss":262,"published":518,"ranges":519,"checked":4,"hits":520,"covers":18},"2014-05-07T10:55:04.337",[58,61],[],{"cveId":268,"name":272,"severity":160,"cvss":166,"added":264,"epss":271,"published":522,"ranges":523,"checked":4,"hits":524,"covers":18},"2016-04-21T11:00:21.667",[69,75,78,81,85,88,90],[],{"cveId":276,"name":280,"severity":177,"cvss":215,"added":281,"epss":279,"published":526,"ranges":527,"checked":4,"hits":528,"covers":18},"2022-01-28T20:15:12.193",[96],[],{"cveId":284,"name":288,"severity":177,"cvss":225,"added":289,"epss":287,"published":530,"ranges":531,"checked":4,"hits":532,"covers":18},"2016-03-29T10:59:00.16",[69],[],{"cveId":292,"name":296,"severity":177,"cvss":225,"added":297,"epss":295,"published":534,"ranges":535,"checked":4,"hits":536,"covers":18},"2015-08-08T00:59:04.597",[69,72,75,78,81,85,88,90],[],{"cveId":300,"name":304,"severity":177,"cvss":215,"added":305,"epss":303,"published":538,"ranges":539,"checked":4,"hits":540,"covers":18},"2017-04-27T01:59:02.057",[78,81,85,88,90],[],{"cveId":308,"name":312,"severity":177,"cvss":225,"added":313,"epss":311,"published":542,"ranges":543,"checked":4,"hits":544,"covers":18},"2023-03-06T23:15:10.287",[99,102],[],{"cveId":316,"name":320,"severity":177,"cvss":215,"added":321,"epss":319,"published":546,"ranges":547,"checked":4,"hits":548,"covers":18},"2022-03-10T17:44:57.283",[96,99],[],{"cveId":190,"name":324,"severity":160,"cvss":166,"added":325,"epss":193,"published":550,"ranges":551,"checked":4,"hits":552,"covers":18},"2015-06-23T21:59:01.96",[67],[],{"cveId":328,"name":333,"severity":177,"cvss":331,"added":334,"epss":332,"published":554,"ranges":555,"checked":4,"hits":556,"covers":18},"2012-06-09T00:55:00.987",[55],[],{"cveId":337,"name":341,"severity":160,"cvss":166,"added":334,"epss":340,"published":558,"ranges":559,"checked":4,"hits":560,"covers":18},"2013-05-16T11:45:31.263",[46,61],[],{"cveId":344,"name":348,"severity":177,"cvss":225,"added":334,"epss":347,"published":562,"ranges":563,"checked":4,"hits":564,"covers":18},"2013-06-26T03:19:10.793",[46,61],[],{"cveId":168,"name":351,"severity":160,"cvss":166,"added":352,"epss":171,"published":566,"ranges":567,"checked":4,"hits":568,"covers":18},"2012-05-11T10:15:48.043",[41,52,55],[],{"cveId":201,"name":355,"severity":177,"cvss":176,"added":352,"epss":204,"published":570,"ranges":571,"checked":4,"hits":572,"covers":18},"2017-09-19T13:29:00.19",[81,85,88,90],[],{"cveId":173,"name":358,"severity":177,"cvss":176,"added":352,"epss":178,"published":574,"ranges":575,"checked":4,"hits":576,"covers":18},"2017-10-04T01:29:02.12",[81,85,88,90],[],{"cveId":195,"name":361,"severity":177,"cvss":198,"added":352,"epss":199,"published":578,"ranges":579,"checked":4,"hits":580,"covers":18},"2019-10-28T15:15:13.863",[90,93,96,99,102,105],[],{"cveId":364,"name":368,"severity":160,"cvss":166,"added":214,"epss":367,"published":582,"ranges":583,"checked":4,"hits":584,"covers":18},"2015-07-08T14:59:05.677",[67],[],{"cveId":371,"name":375,"severity":177,"cvss":215,"added":214,"epss":374,"published":586,"ranges":587,"checked":4,"hits":588,"covers":18},"2013-02-14T01:55:02.07",[46,61],[],{"cveId":378,"name":381,"severity":177,"cvss":215,"added":214,"epss":380,"published":590,"ranges":591,"checked":4,"hits":592,"covers":18},"2013-02-14T01:55:02.023",[46,61],[],{"cveId":384,"name":388,"severity":261,"cvss":386,"added":214,"epss":387,"published":594,"ranges":595,"checked":4,"hits":596,"covers":18},"2013-05-16T11:45:30.877",[46,61],[],{"cveId":391,"name":395,"severity":160,"cvss":166,"added":214,"epss":394,"published":598,"ranges":599,"checked":4,"hits":600,"covers":18},"2015-07-16T10:59:17.05",[67,69,72,75,78,81,85],[],{"cveId":398,"name":402,"severity":160,"cvss":166,"added":214,"epss":401,"published":602,"ranges":603,"checked":4,"hits":604,"covers":18},"2012-08-28T00:55:01.86",[58],[],{"cveId":405,"name":402,"severity":160,"cvss":166,"added":214,"epss":408,"published":606,"ranges":607,"checked":4,"hits":608,"covers":18},"2012-06-16T21:55:03.5",[55],[],{"cveId":411,"name":416,"severity":261,"cvss":414,"added":214,"epss":415,"published":610,"ranges":611,"checked":4,"hits":612,"covers":18},"2015-10-22T00:00:03.093",[69,75,78,81,85],[]]