satellite/iop-vulnerability-engine-rhel9

Direct Vulnerabilities

Known vulnerabilities in the satellite/iop-vulnerability-engine-rhel9 package. This does not include vulnerabilities belonging to this package’s dependencies.

Vulnerability	Vulnerable Version
M Exposure of System Data to an Unauthorized Control Sphere	*
H Inefficient Regular Expression Complexity	*
M Link Following	*
H Allocation of Resources Without Limits or Throttling	*
H Improper Certificate Validation	*
H Arbitrary Argument Injection	*
H Arbitrary Argument Injection	*
M Improper Certificate Validation	*
H Inefficient Regular Expression Complexity	*
H Directory Traversal	*
M Directory Traversal	*
M Use of Blocking Code in Single-threaded, Non-blocking Context	*
M Improper Certificate Validation	*
L Improper Validation of Unsafe Equivalence in Input	*
H Out-of-bounds Read	*
L Improper Certificate Validation	*
M Incorrect Use of Privileged APIs	*
M Directory Traversal	*
H Directory Traversal	*
C Arbitrary Argument Injection	*
M Arbitrary Argument Injection	*
M External Control of File Name or Path	*
H Arbitrary Code Injection	*
M Arbitrary Argument Injection	*
H Directory Traversal	*
H Arbitrary Argument Injection	*
H OS Command Injection	*
H OS Command Injection	*
M OS Command Injection	*
H Arbitrary Argument Injection	*
H Improper Validation of Syntactic Correctness of Input	*
H Arbitrary Argument Injection	*
M Arbitrary Argument Injection	*
H Arbitrary Argument Injection	*
H OS Command Injection	*
H Improper Control of Dynamically-Identified Variables	*
M Directory Traversal	*
H Arbitrary Argument Injection	*
H OS Command Injection	*
H Arbitrary Argument Injection	*
H OS Command Injection	*
H Information Exposure	*
M Improper Validation of Consistency within Input	*
M Misinterpretation of Input	*
L Resource Exhaustion	*
L Improper Validation of Syntactic Correctness of Input	*
L CRLF Injection	*
H Unchecked Input for Loop Condition	*
L Improper Verification of Source of a Communication Channel	*
M Directory Traversal	*
M Exposed Dangerous Method or Function	*
M Off-by-one Error	*
M Information Exposure	*
L Improper Validation of Unsafe Equivalence in Input	*
M Information Exposure	*
L Out-of-bounds Write	*
M Excessive Platform Resource Consumption within a Loop	*
L Exposure of System Data to an Unauthorized Control Sphere	*
M Improper Validation of Syntactic Correctness of Input	*
M Allocation of Resources Without Limits or Throttling	*
L Allocation of Resources Without Limits or Throttling	*
M HTTP Request Smuggling	*
M Allocation of Resources Without Limits or Throttling	*
L Improper Validation of Syntactic Correctness of Input	*
M CRLF Injection	*
L Allocation of Resources Without Limits or Throttling	*
M Creation of Temporary File in Directory with Incorrect Permissions	*
M Buffer Access with Incorrect Length Value	*
L Inefficient Regular Expression Complexity	*
M Link Following	*
H Inefficient Regular Expression Complexity	*
M Allocation of Resources Without Limits or Throttling	*
M Information Exposure Through Caching	*
H Directory Traversal	*
M Creation of Temporary File in Directory with Incorrect Permissions	*
M Time-of-check Time-of-use (TOCTOU)	*
M Link Following	*
H Allocation of Resources Without Limits or Throttling	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
M HTTP Request Smuggling	*
M Directory Traversal	*
L HTTP Request Smuggling	*
M Allocation of Resources Without Limits or Throttling	*
M Allocation of Resources Without Limits or Throttling	*
L Logging of Excessive Data	*
M Time-of-check Time-of-use (TOCTOU)	*
H Algorithmic Complexity	*

satellite/iop-vulnerability-engine-rhel9

Direct Vulnerabilities

Fix vulnerabilities automatically