[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ftv72E9id-Rf2GRLtea6OZGCWgOpauMVJ-AIpFoIxd2c":3,"g5a-ex:redhat\u002Fsoftware_collections@*":163,"g5a-family:redhat\u002Fsoftware_collections":180},{"success":4,"data":5},true,{"product":6,"versions":46,"topVulnerabilitiesByEpss":61,"kevVulnerabilities":116,"seoMetadata":142,"meta":161},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":45},"redhat","software_collections",14,137,5,"2023-12-10",[14,17,21,23,25,27,29,31,33,35,37,39,41,43],{"version":15,"cve_count":16,"kev_count":11,"has_kev":4},"1.0",113,{"version":18,"cve_count":19,"kev_count":19,"has_kev":20},"1.1",0,false,{"version":22,"cve_count":19,"kev_count":19,"has_kev":20},"1.2",{"version":24,"cve_count":19,"kev_count":19,"has_kev":20},"2.0",{"version":26,"cve_count":19,"kev_count":19,"has_kev":20},"2.1",{"version":28,"cve_count":19,"kev_count":19,"has_kev":20},"2.2",{"version":30,"cve_count":19,"kev_count":19,"has_kev":20},"2.3",{"version":32,"cve_count":19,"kev_count":19,"has_kev":20},"2.4",{"version":34,"cve_count":19,"kev_count":19,"has_kev":20},"3.0",{"version":36,"cve_count":19,"kev_count":19,"has_kev":20},"3.1",{"version":38,"cve_count":19,"kev_count":19,"has_kev":20},"3.2",{"version":40,"cve_count":19,"kev_count":19,"has_kev":20},"3.3",{"version":42,"cve_count":19,"kev_count":19,"has_kev":20},"3.4",{"version":44,"cve_count":19,"kev_count":19,"has_kev":20},"3.5","Software Collections by Redhat is a technology product with 14 tracked versions and 137 known security vulnerabilities including 5 CISA Known Exploited Vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[47,48,49,50,51,52,53,54,55,56,57,58,59,60],{"version":15,"cve_count":16,"kev_count":11,"has_kev":4},{"version":18,"cve_count":19,"kev_count":19,"has_kev":20},{"version":22,"cve_count":19,"kev_count":19,"has_kev":20},{"version":24,"cve_count":19,"kev_count":19,"has_kev":20},{"version":26,"cve_count":19,"kev_count":19,"has_kev":20},{"version":28,"cve_count":19,"kev_count":19,"has_kev":20},{"version":30,"cve_count":19,"kev_count":19,"has_kev":20},{"version":32,"cve_count":19,"kev_count":19,"has_kev":20},{"version":34,"cve_count":19,"kev_count":19,"has_kev":20},{"version":36,"cve_count":19,"kev_count":19,"has_kev":20},{"version":38,"cve_count":19,"kev_count":19,"has_kev":20},{"version":40,"cve_count":19,"kev_count":19,"has_kev":20},{"version":42,"cve_count":19,"kev_count":19,"has_kev":20},{"version":44,"cve_count":19,"kev_count":19,"has_kev":20},[62,70,77,83,88,93,98,102,107,111],{"cveId":63,"description":64,"publishedDate":65,"cvssScore":66,"cvssVersion":67,"severity":68,"isKev":4,"epssScore":69},"CVE-2021-40438","A crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user. This issue affects Apache HTTP Server 2.4.48 and earlier.","2021-09-16",9,"v3.1","Critical",0.99999,{"cveId":71,"description":72,"publishedDate":73,"cvssScore":74,"cvssVersion":67,"severity":75,"isKev":4,"epssScore":76},"CVE-2019-11043","In PHP versions 7.1.x below 7.1.33, 7.2.x below 7.2.24 and 7.3.x below 7.3.11 in certain configurations of FPM setup it is possible to cause FPM module to write past allocated buffers into the space reserved for FCGI protocol data, thus opening the possibility of remote code execution.","2019-10-28",8.7,"High",0.99748,{"cveId":78,"description":79,"publishedDate":80,"cvssScore":81,"cvssVersion":67,"severity":75,"isKev":4,"epssScore":82},"CVE-2019-5418","There is a File Content Disclosure vulnerability in Action View \u003C5.2.2.1, \u003C5.1.6.2, \u003C5.0.7.2, \u003C4.2.11.1 and v3 where specially crafted accept headers can cause contents of arbitrary files on the target system's filesystem to be exposed.","2019-03-27",7.5,0.98507,{"cveId":84,"description":85,"publishedDate":86,"cvssScore":81,"cvssVersion":67,"severity":75,"isKev":4,"epssScore":87},"CVE-2016-0752","Directory traversal vulnerability in Action View in Ruby on Rails before 3.2.22.1, 4.0.x and 4.1.x before 4.1.14.1, 4.2.x before 4.2.5.1, and 5.x before 5.0.0.beta1.1 allows remote attackers to read arbitrary files by leveraging an application's unrestricted use of the render method and providing a .. (dot dot) in a pathname.","2016-02-16",0.95537,{"cveId":89,"description":90,"publishedDate":91,"cvssScore":81,"cvssVersion":67,"severity":75,"isKev":20,"epssScore":92},"CVE-2020-9490","Apache HTTP Server versions 2.4.20 to 2.4.43. A specially crafted value for the 'Cache-Digest' header in a HTTP\u002F2 request would result in a crash when the server actually tries to HTTP\u002F2 PUSH a resource afterwards. Configuring the HTTP\u002F2 feature via \"H2Push off\" will mitigate this vulnerability for unpatched servers.","2020-08-07",0.88844,{"cveId":94,"description":95,"publishedDate":96,"cvssScore":81,"cvssVersion":67,"severity":75,"isKev":20,"epssScore":97},"CVE-2019-9515","Some HTTP\u002F2 implementations are vulnerable to a settings flood, potentially leading to a denial of service. The attacker sends a stream of SETTINGS frames to the peer. Since the RFC requires that the peer reply with one acknowledgement per SETTINGS frame, an empty SETTINGS frame is almost equivalent in behavior to a ping. Depending on how efficiently this data is queued, this can consume excess CPU, memory, or both.","2019-08-13",0.87399,{"cveId":99,"description":100,"publishedDate":96,"cvssScore":81,"cvssVersion":67,"severity":75,"isKev":20,"epssScore":101},"CVE-2019-9514","Some HTTP\u002F2 implementations are vulnerable to a reset flood, potentially leading to a denial of service. The attacker opens a number of streams and sends an invalid request over each stream that should solicit a stream of RST_STREAM frames from the peer. Depending on how the peer queues the RST_STREAM frames, this can consume excess memory, CPU, or both.",0.82813,{"cveId":103,"description":104,"publishedDate":105,"cvssScore":81,"cvssVersion":67,"severity":75,"isKev":20,"epssScore":106},"CVE-2016-0742","The resolver in nginx before 1.8.1 and 1.9.x before 1.9.10 allows remote attackers to cause a denial of service (invalid pointer dereference and worker process crash) via a crafted UDP DNS response.","2016-02-15",0.82377,{"cveId":108,"description":109,"publishedDate":96,"cvssScore":81,"cvssVersion":67,"severity":75,"isKev":20,"epssScore":110},"CVE-2019-9513","Some HTTP\u002F2 implementations are vulnerable to resource loops, potentially leading to a denial of service. The attacker creates multiple request streams and continually shuffles the priority of the streams in a way that causes substantial churn to the priority tree. This can consume excess CPU.",0.81556,{"cveId":112,"description":113,"publishedDate":114,"cvssScore":81,"cvssVersion":67,"severity":75,"isKev":20,"epssScore":115},"CVE-2021-4104","JMSAppender in Log4j 1.2 is vulnerable to deserialization of untrusted data when the attacker has write access to the Log4j configuration. The attacker can provide TopicBindingName and TopicConnectionFactoryBindingName configurations causing JMSAppender to perform JNDI requests that result in remote code execution in a similar fashion to CVE-2021-44228. Note this issue only affects Log4j 1.2 when specifically configured to use JMSAppender, which is not the default. Apache Log4j 1.2 reached end of life in August 2015. Users should upgrade to Log4j 2 as it addresses numerous other issues from the previous versions.","2021-12-14",0.80599,[117,122,127,130,133],{"cveId":78,"description":79,"publishedDate":80,"cvssScore":81,"severity":75,"isKev":4,"epssScore":82,"cisaVulnName":118,"cisaDateAdded":119,"cisaShortDescription":120,"cisaRequiredAction":121},"Rails Ruby on Rails Path Traversal Vulnerability","2025-07-07","Rails Ruby on Rails contains a path traversal vulnerability in Action View. Specially crafted accept headers in combination with calls to `render file:` can cause arbitrary files on the target server to be rendered, disclosing the file contents.","Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.",{"cveId":84,"description":85,"publishedDate":86,"cvssScore":81,"severity":75,"isKev":4,"epssScore":87,"cisaVulnName":123,"cisaDateAdded":124,"cisaShortDescription":125,"cisaRequiredAction":126},"Ruby on Rails Directory Traversal Vulnerability","2022-03-25","Directory traversal vulnerability in Action View in Ruby on Rails allows remote attackers to read arbitrary files.","Apply updates per vendor instructions.",{"cveId":71,"description":72,"publishedDate":73,"cvssScore":74,"severity":75,"isKev":4,"epssScore":76,"cisaVulnName":128,"cisaDateAdded":124,"cisaShortDescription":129,"cisaRequiredAction":126},"PHP FastCGI Process Manager (FPM) Buffer Overflow Vulnerability","In some versions of PHP in certain configurations of FPM setup, it is possible to cause FPM module to write past allocated buffers allowing the possibility of remote code execution.",{"cveId":63,"description":64,"publishedDate":65,"cvssScore":66,"severity":68,"isKev":4,"epssScore":69,"cisaVulnName":131,"cisaDateAdded":132,"cisaShortDescription":64,"cisaRequiredAction":126},"Apache HTTP Server-Side Request Forgery (SSRF)","2021-12-01",{"cveId":134,"description":135,"publishedDate":136,"cvssScore":137,"severity":75,"isKev":4,"epssScore":138,"cisaVulnName":139,"cisaDateAdded":140,"cisaShortDescription":141,"cisaRequiredAction":126},"CVE-2019-0211","In Apache HTTP Server 2.4 releases 2.4.17 to 2.4.38, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute arbitrary code with the privileges of the parent process (usually root) by manipulating the scoreboard. Non-Unix systems are not affected.","2019-04-08",7.8,0.65005,"Apache HTTP Server Privilege Escalation Vulnerability","2021-11-03","Apache HTTP Server, with MPM event, worker or prefork, code executing in less-privileged child processes or threads (including scripts executed by an in-process scripting interpreter) could execute code with the privileges of the parent process (usually root) by manipulating the scoreboard.",{"title":143,"metaDescription":144,"keywords":145,"structuredData":146},"Software Collections by Redhat - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Software Collections by Redhat covering 14 versions with 137 tracked vulnerabilities including 1 critical and 4 high-severity issues and 5 CISA KEV vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Software Collections vulnerabilities, Software Collections security, Software Collections CVE, Redhat Software Collections, Software Collections threat intelligence, Redhat security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Software Collections KEV, Software Collections exploited vulnerabilities",{"@context":147,"@type":148,"name":149,"description":144,"url":150,"manufacturer":151,"applicationCategory":155,"softwareVersion":156,"mainEntity":157},"https:\u002F\u002Fschema.org","SoftwareApplication","Software Collections","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fredhat\u002Fsoftware_collections",{"@type":152,"name":153,"url":154},"Organization","Redhat","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fredhat","Security Software","14 versions tracked",{"@type":158,"name":159,"description":160,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Software Collections Security Vulnerabilities","Security vulnerabilities affecting Software Collections by Redhat",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":162,"apiVersion":34},"2026-10-17T14:34:11.397Z",{"rows":164,"total":11,"capped":20,"failed":11},[165,168,171,174,177],{"cveId":78,"name":118,"severity":75,"cvss":81,"added":119,"epss":82,"published":80,"ranges":166,"hits":167,"checked":20,"covers":20},[],[],{"cveId":84,"name":123,"severity":75,"cvss":81,"added":124,"epss":87,"published":86,"ranges":169,"hits":170,"checked":20,"covers":20},[],[],{"cveId":71,"name":128,"severity":75,"cvss":74,"added":124,"epss":76,"published":73,"ranges":172,"hits":173,"checked":20,"covers":20},[],[],{"cveId":63,"name":131,"severity":68,"cvss":66,"added":132,"epss":69,"published":65,"ranges":175,"hits":176,"checked":20,"covers":20},[],[],{"cveId":134,"name":139,"severity":75,"cvss":137,"added":140,"epss":138,"published":136,"ranges":178,"hits":179,"checked":20,"covers":20},[],[],[]]