[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fAiVaULXVMGiyHlW0um6xb12cvyZHsigx4jxGexe3xh8":3,"g5a-family:redhat\u002Fenterprise_linux_hpc_node":128,"g5a-ex:redhat\u002Fenterprise_linux_hpc_node@*":135},{"success":4,"data":5},true,{"product":6,"versions":26,"topVulnerabilitiesByEpss":30,"kevVulnerabilities":87,"seoMetadata":106,"meta":125},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":25},"redhat","enterprise_linux_hpc_node",3,149,2,"2017-07-25",[14,19,22],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"6",15,0,false,{"version":20,"cve_count":21,"kev_count":11,"has_kev":4},"6.0",58,{"version":23,"cve_count":24,"kev_count":11,"has_kev":4},"7.0",123,"Enterprise Linux Hpc Node by Redhat is a technology product with 3 tracked versions and 149 known security vulnerabilities including 2 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[27,28,29],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":21,"kev_count":11,"has_kev":4},{"version":23,"cve_count":24,"kev_count":11,"has_kev":4},[31,39,47,53,58,62,67,74,79,83],{"cveId":32,"description":33,"publishedDate":34,"cvssScore":35,"cvssVersion":36,"severity":37,"isKev":18,"epssScore":38},"CVE-2015-7547","Multiple stack-based buffer overflows in the (1) send_dg and (2) send_vc functions in the libresolv library in the GNU C Library (aka glibc or libc6) before 2.23 allow remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via a crafted DNS response that triggers a call to the getaddrinfo function with the AF_UNSPEC or AF_INET6 address family, related to performing \"dual A\u002FAAAA DNS queries\" and the libnss_dns.so.2 NSS module.","2016-02-18",8.1,"v3.0","High",0.90987,{"cveId":40,"description":41,"publishedDate":42,"cvssScore":43,"cvssVersion":44,"severity":45,"isKev":18,"epssScore":46},"CVE-2016-2107","The AES-NI implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h does not consider memory allocation during a certain padding check, which allows remote attackers to obtain sensitive cleartext information via a padding-oracle attack against an AES CBC session. NOTE: this vulnerability exists because of an incorrect fix for CVE-2013-0169.","2016-05-05",5.9,"v3.1","Medium",0.89058,{"cveId":48,"description":49,"publishedDate":42,"cvssScore":50,"cvssVersion":36,"severity":51,"isKev":18,"epssScore":52},"CVE-2016-2108","The ASN.1 implementation in OpenSSL before 1.0.1o and 1.0.2 before 1.0.2c allows remote attackers to execute arbitrary code or cause a denial of service (buffer underflow and memory corruption) via an ANY field in crafted serialized data, aka the \"negative zero\" issue.",9.8,"Critical",0.77906,{"cveId":54,"description":55,"publishedDate":42,"cvssScore":56,"cvssVersion":44,"severity":45,"isKev":4,"epssScore":57},"CVE-2016-3718","The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted image.",5.5,0.7565,{"cveId":59,"description":60,"publishedDate":42,"cvssScore":56,"cvssVersion":44,"severity":45,"isKev":4,"epssScore":61},"CVE-2016-3715","The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image.",0.75307,{"cveId":63,"description":64,"publishedDate":65,"cvssScore":35,"cvssVersion":36,"severity":37,"isKev":18,"epssScore":66},"CVE-2016-5388","Apache Tomcat 7.x through 7.0.70 and 8.x through 8.5.4, when the CGI Servlet is enabled, follows RFC 3875 section 4.1.18 and therefore does not protect applications from the presence of untrusted client data in the HTTP_PROXY environment variable, which might allow remote attackers to redirect an application's outbound HTTP traffic to an arbitrary proxy server via a crafted Proxy header in an HTTP request, aka an \"httpoxy\" issue. NOTE: the vendor states \"A mitigation is planned for future releases of Tomcat, tracked as CVE-2016-5388\"; in other words, this is not a CVE ID for a vulnerability.","2016-07-19",0.50896,{"cveId":68,"description":69,"publishedDate":70,"cvssScore":71,"cvssVersion":72,"severity":45,"isKev":18,"epssScore":73},"CVE-2015-4024","Algorithmic complexity vulnerability in the multipart_buffer_headers function in main\u002Frfc1867.c in PHP before 5.4.41, 5.5.x before 5.5.25, and 5.6.x before 5.6.9 allows remote attackers to cause a denial of service (CPU consumption) via crafted form data that triggers an improper order-of-growth outcome.","2015-06-09",5,"v2",0.49885,{"cveId":75,"description":76,"publishedDate":42,"cvssScore":77,"cvssVersion":44,"severity":37,"isKev":18,"epssScore":78},"CVE-2016-2105","Integer overflow in the EVP_EncodeUpdate function in crypto\u002Fevp\u002Fencode.c in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (heap memory corruption) via a large amount of binary data.",7.5,0.3965,{"cveId":80,"description":81,"publishedDate":70,"cvssScore":77,"cvssVersion":72,"severity":37,"isKev":18,"epssScore":82},"CVE-2015-3329","Multiple stack-based buffer overflows in the phar_set_inode function in phar_internal.h in PHP before 5.4.40, 5.5.x before 5.5.24, and 5.6.x before 5.6.8 allow remote attackers to execute arbitrary code via a crafted length value in a (1) tar, (2) phar, or (3) ZIP archive.",0.38212,{"cveId":84,"description":85,"publishedDate":42,"cvssScore":77,"cvssVersion":36,"severity":37,"isKev":18,"epssScore":86},"CVE-2016-2109","The asn1_d2i_read_bio function in crypto\u002Fasn1\u002Fa_d2i_fp.c in the ASN.1 BIO implementation in OpenSSL before 1.0.1t and 1.0.2 before 1.0.2h allows remote attackers to cause a denial of service (memory consumption) via a short invalid encoding.",0.2921,[88,98,103],{"cveId":89,"description":90,"publishedDate":91,"cvssScore":92,"severity":45,"isKev":4,"epssScore":93,"cisaVulnName":94,"cisaDateAdded":95,"cisaShortDescription":96,"cisaRequiredAction":97},"CVE-2015-5287","The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions to gain privileges via a symlink attack on a file with a predictable name, as demonstrated by \u002Fvar\u002Ftmp\u002Fabrt\u002Fabrt-hax-coredump or \u002Fvar\u002Fspool\u002Fabrt\u002Fabrt-hax-coredump.","2015-12-07",6.9,0.05003,"Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability","2026-08-26","Red Hat Automatic Bug Reporting Tool (ABRT) contains a privilege escalation vulnerability that could allow local users with certain permissions to gain privileges via a symlink attack on a file with a predictable name. The impacted product(s) could be end-of-life (EoL) and\u002For end-of-service (EoS). Users are advised to discontinue use and\u002For transition to a supported version.","Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.",{"cveId":59,"description":60,"publishedDate":42,"cvssScore":56,"severity":45,"isKev":4,"epssScore":61,"cisaVulnName":99,"cisaDateAdded":100,"cisaShortDescription":101,"cisaRequiredAction":102},"ImageMagick Arbitrary File Deletion Vulnerability","2021-11-03","ImageMagick contains an unspecified vulnerability that could allow users to delete files by using ImageMagick's 'ephemeral' pseudo protocol, which deletes files after reading.","Apply updates per vendor instructions.",{"cveId":54,"description":55,"publishedDate":42,"cvssScore":56,"severity":45,"isKev":4,"epssScore":57,"cisaVulnName":104,"cisaDateAdded":100,"cisaShortDescription":105,"cisaRequiredAction":102},"ImageMagick Server-Side Request Forgery (SSRF) Vulnerability","ImageMagick contains an unspecified vulnerability that allows attackers to perform server-side request forgery (SSRF) via a crafted image.",{"title":107,"metaDescription":108,"keywords":109,"structuredData":110},"Enterprise Linux Hpc Node by Redhat - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Enterprise Linux Hpc Node by Redhat covering 3 versions with 149 tracked vulnerabilities and 2 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Enterprise Linux Hpc Node vulnerabilities, Enterprise Linux Hpc Node security, Enterprise Linux Hpc Node CVE, Redhat Enterprise Linux Hpc Node, Enterprise Linux Hpc Node threat intelligence, Redhat security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Enterprise Linux Hpc Node KEV, Enterprise Linux Hpc Node exploited vulnerabilities",{"@context":111,"@type":112,"name":113,"description":108,"url":114,"manufacturer":115,"applicationCategory":119,"softwareVersion":120,"mainEntity":121},"https:\u002F\u002Fschema.org","SoftwareApplication","Enterprise Linux Hpc Node","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fredhat\u002Fenterprise_linux_hpc_node",{"@type":116,"name":117,"url":118},"Organization","Redhat","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fredhat","Security Software","3 versions tracked",{"@type":122,"name":123,"description":124,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Enterprise Linux Hpc Node Security Vulnerabilities","Security vulnerabilities affecting Enterprise Linux Hpc Node by Redhat",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":126,"apiVersion":127},"2026-10-17T11:58:12.825Z","3.0",[129,132],{"product":130,"cves":131},"enterprise_linux_hpc_node_eus",83,{"product":133,"cves":134},"enterprise_linux_hpc_node_supplementary",9,{"rows":136,"total":9,"capped":18,"failed":17},[137,141,145],{"cveId":89,"name":94,"severity":45,"cvss":92,"added":95,"epss":93,"published":138,"ranges":139,"checked":4,"hits":140,"covers":18},"2015-12-07T18:59:02.23",[23],[],{"cveId":59,"name":99,"severity":45,"cvss":56,"added":100,"epss":61,"published":142,"ranges":143,"checked":4,"hits":144,"covers":18},"2016-05-05T18:59:04.727",[20,23],[],{"cveId":54,"name":104,"severity":45,"cvss":56,"added":100,"epss":57,"published":146,"ranges":147,"checked":4,"hits":148,"covers":18},"2016-05-05T18:59:08.96",[20,23],[]]