[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fxXb7AJEGBR0_eE5F9be13EPIMtGIlPprbNcjJDyRbos":3,"g5a-family:redhat\u002Fenterprise_linux_for_scientific_computing":152,"g5a-ex:redhat\u002Fenterprise_linux_for_scientific_computing@*":153},{"success":4,"data":5},true,{"product":6,"versions":23,"topVulnerabilitiesByEpss":26,"kevVulnerabilities":89,"seoMetadata":130,"meta":149},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":22},"redhat","enterprise_linux_for_scientific_computing",2,71,9,"2024-01-18",[14,18],{"version":15,"cve_count":16,"kev_count":17,"has_kev":4},"6.0",44,4,{"version":19,"cve_count":20,"kev_count":21,"has_kev":4},"7.0",32,8,"Enterprise Linux For Scientific Computing by Redhat is a technology product with 2 tracked versions and 71 known security vulnerabilities including 9 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[24,25],{"version":15,"cve_count":16,"kev_count":17,"has_kev":4},{"version":19,"cve_count":20,"kev_count":21,"has_kev":4},[27,35,39,44,51,57,63,70,77,84],{"cveId":28,"description":29,"publishedDate":30,"cvssScore":31,"cvssVersion":32,"severity":33,"isKev":4,"epssScore":34},"CVE-2014-6271","GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute arbitrary code via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution, aka \"ShellShock.\"  NOTE: the original fix for this issue was incorrect; CVE-2014-7169 has been assigned to cover the vulnerability that is still present after the incorrect fix.","2014-09-24",9.8,"v3.1","Critical",0.99999,{"cveId":36,"description":37,"publishedDate":38,"cvssScore":11,"cvssVersion":32,"severity":33,"isKev":4,"epssScore":34},"CVE-2021-40438","A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.","2021-09-16",{"cveId":40,"description":41,"publishedDate":42,"cvssScore":31,"cvssVersion":32,"severity":33,"isKev":4,"epssScore":43},"CVE-2014-7169","GNU Bash through 4.3 bash43-025 processes trailing strings after certain malformed function definitions in the values of environment variables, which allows remote attackers to write to files or possibly have unknown other impact via a crafted environment, as demonstrated by vectors involving the ForceCommand feature in OpenSSH sshd, the mod_cgi and mod_cgid modules in the Apache HTTP Server, scripts executed by unspecified DHCP clients, and other situations in which setting the environment occurs across a privilege boundary from Bash execution.  NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-6271.","2014-09-25",0.9994,{"cveId":45,"description":46,"publishedDate":47,"cvssScore":48,"cvssVersion":32,"severity":49,"isKev":4,"epssScore":50},"CVE-2019-11043","In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buffers into the space reserved for FCGI protocol data, thus opening the possibility of remote code execution.","2019-10-28",8.7,"High",0.99748,{"cveId":52,"description":53,"publishedDate":54,"cvssScore":55,"cvssVersion":32,"severity":49,"isKev":4,"epssScore":56},"CVE-2017-12615","When running Apache Tomcat 7.0.0 to 7.0.79 on Windows with HTTP PUTs enabled (e.g. via setting the readonly initialisation parameter of the Default to false) it was possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.","2017-09-19",8.1,0.99641,{"cveId":58,"description":59,"publishedDate":60,"cvssScore":61,"cvssVersion":32,"severity":49,"isKev":4,"epssScore":62},"CVE-2021-4034","A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully executed the attack can cause a local privilege escalation given unprivileged users administrative rights on the target machine.","2022-01-28",7.8,0.94921,{"cveId":64,"description":65,"publishedDate":66,"cvssScore":67,"cvssVersion":32,"severity":49,"isKev":68,"epssScore":69},"CVE-2021-44142","The Samba vfs_fruit module uses extended file attributes (EA, xattr) to provide \"...enhanced compatibility with Apple SMB clients and interoperability with a Netatalk 3 AFP fileserver.\" Samba versions prior to 4.13.17, 4.14.12 and 4.15.5 with vfs_fruit configured allow out-of-bounds heap read and write via specially crafted extended file attributes. A remote attacker with write access to extended file attributes can execute arbitrary code with the privileges of smbd, typically root.","2022-02-21",8.8,false,0.73589,{"cveId":71,"description":72,"publishedDate":73,"cvssScore":74,"cvssVersion":32,"severity":75,"isKev":4,"epssScore":76},"CVE-2015-4902","Unspecified vulnerability in Oracle Java SE 6u101, 7u85, and 8u60 allows remote attackers to affect integrity via unknown vectors related to Deployment.","2015-10-22",5.3,"Medium",0.13603,{"cveId":78,"description":79,"publishedDate":80,"cvssScore":81,"cvssVersion":82,"severity":33,"isKev":68,"epssScore":83},"CVE-2015-5165","The C+ mode offload emulation in the RTL8139 network card device model in QEMU, as used in Xen 4.5.x and earlier, allows remote attackers to read process heap memory via unspecified vectors.","2015-08-12",9.3,"v2",0.13288,{"cveId":85,"description":86,"publishedDate":87,"cvssScore":74,"cvssVersion":32,"severity":75,"isKev":68,"epssScore":88},"CVE-2019-7317","png_image_free in png.c in libpng 1.6.x before 1.6.37 has a use-after-free because png_image_free_function is called under png_safe_execute.","2019-02-04",0.09393,[90,95,103,107,110,119,122,125,127],{"cveId":58,"description":59,"publishedDate":60,"cvssScore":61,"severity":49,"isKev":4,"epssScore":62,"cisaVulnName":91,"cisaDateAdded":92,"cisaShortDescription":93,"cisaRequiredAction":94},"Red Hat Polkit Out-of-Bounds Read and Write Vulnerability","2022-06-27","The Red Hat polkit pkexec utility contains an out-of-bounds read and write vulnerability that allows for privilege escalation with administrative rights.","Apply updates per vendor instructions.",{"cveId":96,"description":97,"publishedDate":98,"cvssScore":67,"severity":49,"isKev":4,"epssScore":99,"cisaVulnName":100,"cisaDateAdded":101,"cisaShortDescription":102,"cisaRequiredAction":94},"CVE-2019-8720","A vulnerability was found in WebKit. The flaw is triggered when processing maliciously crafted web content that may lead to arbitrary code execution. Improved memory handling addresses the multiple memory corruption issues.","2023-03-06",0.01556,"WebKitGTK Memory Corruption Vulnerability","2022-05-23","WebKitGTK contains a memory corruption vulnerability which can allow an attacker to perform remote code execution.",{"cveId":52,"description":53,"publishedDate":54,"cvssScore":55,"severity":49,"isKev":4,"epssScore":56,"cisaVulnName":104,"cisaDateAdded":105,"cisaShortDescription":106,"cisaRequiredAction":94},"Apache Tomcat on Windows Remote Code Execution Vulnerability","2022-03-25","When running Apache Tomcat on Windows with HTTP PUTs enabled, it is possible to upload a JSP file to the server via a specially crafted request. This JSP could then be requested and any code it contained would be executed by the server.",{"cveId":45,"description":46,"publishedDate":47,"cvssScore":48,"severity":49,"isKev":4,"epssScore":50,"cisaVulnName":108,"cisaDateAdded":105,"cisaShortDescription":109,"cisaRequiredAction":94},"PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability","In some versions of PHP in certain configurations of FPM setup, it is possible to cause FPM module to write past allocated buffers allowing the possibility of remote code execution.",{"cveId":111,"description":112,"publishedDate":113,"cvssScore":114,"severity":75,"isKev":4,"epssScore":115,"cisaVulnName":116,"cisaDateAdded":117,"cisaShortDescription":118,"cisaRequiredAction":94},"CVE-2013-1675","Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbird before 17.0.6, and Thunderbird ESR 17.x before 17.0.6 do not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.","2013-05-16",6.5,0.06696,"Mozilla Firefox Information Disclosure Vulnerability","2022-03-03","Mozilla Firefox does not properly initialize data structures for the nsDOMSVGZoomEvent::mPreviousScale and nsDOMSVGZoomEvent::mNewScale functions, which allows remote attackers to obtain sensitive information from process memory via a crafted web site.",{"cveId":71,"description":72,"publishedDate":73,"cvssScore":74,"severity":75,"isKev":4,"epssScore":76,"cisaVulnName":120,"cisaDateAdded":117,"cisaShortDescription":121,"cisaRequiredAction":94},"Oracle Java SE Integrity Check Vulnerability","Unspecified vulnerability in Oracle Java SE allows remote attackers to affect integrity via Unknown vectors related to deployment.",{"cveId":40,"description":41,"publishedDate":42,"cvssScore":31,"severity":33,"isKev":4,"epssScore":43,"cisaVulnName":123,"cisaDateAdded":60,"cisaShortDescription":124,"cisaRequiredAction":94},"GNU Bourne-Again Shell (Bash) Arbitrary Code Execution Vulnerability","GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code. This CVE correctly remediates the vulnerability in CVE-2014-6271.",{"cveId":28,"description":29,"publishedDate":30,"cvssScore":31,"severity":33,"isKev":4,"epssScore":34,"cisaVulnName":123,"cisaDateAdded":60,"cisaShortDescription":126,"cisaRequiredAction":94},"GNU Bash through 4.3 processes trailing strings after function definitions in the values of environment variables, which allows remote attackers to execute code.",{"cveId":36,"description":37,"publishedDate":38,"cvssScore":11,"severity":33,"isKev":4,"epssScore":34,"cisaVulnName":128,"cisaDateAdded":129,"cisaShortDescription":37,"cisaRequiredAction":94},"Apache HTTP Server-Side Request Forgery (SSRF)","2021-12-01",{"title":131,"metaDescription":132,"keywords":133,"structuredData":134},"Enterprise Linux For Scientific Computing by Redhat - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Enterprise Linux For Scientific Computing by Redhat covering 2 versions with 71 tracked vulnerabilities including 3 critical and 4 high-severity issues and 9 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Enterprise Linux For Scientific Computing vulnerabilities, Enterprise Linux For Scientific Computing security, Enterprise Linux For Scientific Computing CVE, Redhat Enterprise Linux For Scientific Computing, Enterprise Linux For Scientific Computing threat intelligence, Redhat security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Enterprise Linux For Scientific Computing KEV, Enterprise Linux For Scientific Computing exploited vulnerabilities",{"@context":135,"@type":136,"name":137,"description":132,"url":138,"manufacturer":139,"applicationCategory":143,"softwareVersion":144,"mainEntity":145},"https:\u002F\u002Fschema.org","SoftwareApplication","Enterprise Linux For Scientific Computing","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fredhat\u002Fenterprise_linux_for_scientific_computing",{"@type":140,"name":141,"url":142},"Organization","Redhat","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fredhat","Security Software","2 versions tracked",{"@type":146,"name":147,"description":148,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Enterprise Linux For Scientific Computing Security Vulnerabilities","Security vulnerabilities affecting Enterprise Linux For Scientific Computing by Redhat",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":150,"apiVersion":151},"2026-10-17T18:37:19.977Z","3.0",[],{"rows":154,"total":11,"capped":68,"failed":191},[155,159,163,167,171,175,179,183,187],{"cveId":58,"name":91,"severity":49,"cvss":61,"added":92,"epss":62,"published":156,"ranges":157,"checked":4,"hits":158,"covers":68},"2022-01-28T20:15:12.193",[19],[],{"cveId":96,"name":100,"severity":49,"cvss":67,"added":101,"epss":99,"published":160,"ranges":161,"checked":4,"hits":162,"covers":68},"2023-03-06T23:15:10.287",[19],[],{"cveId":52,"name":104,"severity":49,"cvss":55,"added":105,"epss":56,"published":164,"ranges":165,"checked":4,"hits":166,"covers":68},"2017-09-19T13:29:00.19",[19],[],{"cveId":45,"name":108,"severity":49,"cvss":48,"added":105,"epss":50,"published":168,"ranges":169,"checked":4,"hits":170,"covers":68},"2019-10-28T15:15:13.863",[19],[],{"cveId":111,"name":116,"severity":75,"cvss":114,"added":117,"epss":115,"published":172,"ranges":173,"checked":4,"hits":174,"covers":68},"2013-05-16T11:45:30.877",[15],[],{"cveId":71,"name":120,"severity":75,"cvss":74,"added":117,"epss":76,"published":176,"ranges":177,"checked":4,"hits":178,"covers":68},"2015-10-22T00:00:03.093",[15,19],[],{"cveId":40,"name":123,"severity":33,"cvss":31,"added":60,"epss":43,"published":180,"ranges":181,"checked":4,"hits":182,"covers":68},"2014-09-25T01:55:04.367",[15,19],[],{"cveId":28,"name":123,"severity":33,"cvss":31,"added":60,"epss":34,"published":184,"ranges":185,"checked":4,"hits":186,"covers":68},"2014-09-24T18:48:04.477",[15,19],[],{"cveId":36,"name":128,"severity":33,"cvss":11,"added":129,"epss":34,"published":188,"ranges":189,"checked":4,"hits":190,"covers":68},"2021-09-16T15:15:07.633",[19],[],0]