Vendors / Red Hat Records 7413 All Threatist records
Exploited (KEV) 98
CVSS critical 792
CVSS high 2681
Exploited now Red Hat records in CISA KEV
Components Products in the NVD configurations · select one to filter the records Priority CRITICAL 90KEV
The HTTP/2 protocol allows a denial of service (server resource consumption) because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.99999 · Published 2023-10-10 · Partial fix · 1.28.0, 0.17.0 +9 CWE-400
Priority HIGH 70
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted (from the extension negoti…
CVSS 3.1 MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.93547 · Published 2023-12-18 · Partial fix · 0.40.2, 0.17.0 +2 CWE-354
Priority HIGH 69
Axios is a promise based HTTP client for the browser and Node.js.
CVSS 3.1 HIGH 7.7· Network · No auth · No interaction · EPSS 0.00854 · Published 2026-06-11 · Partial fix · 1.15.2, 0.31.1 CWE-1321
Priority MEDIUM 46
Immutable.js provides many Persistent Immutable data structures.
CVSS 4.0 HIGH 8.7· Network · No auth · No interaction · EPSS 0.0099 · Published 2026-03-06 · Partial fix · 3.8.3, 4.3.7 +2 CWE-1321
Priority MEDIUM 41
A flaw was found in the Red Hat Advanced Cluster Security for Kubernetes.
CVSS 3.1 HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01401 · Published 2022-09-01 · Fixed CWE-497
Priority LOW 36
A flaw was discovered in the mholt/archiver package.
CVSS 3.1 HIGH 7.8· Local · No auth · User interaction · EPSS 0.00928 · Published 2024-04-06 · Partial fix · v4.0.0, v4.18.0-202503051333.p0.g22b273d.assembly.stream.el9 CWE-22
Priority LOW 28
In Red Hat Advanced Cluster Security (RHACS), it was found that some security related HTTP headers were missing, allowing an attacker to exploit this with a clickjacking attack.
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00629 · Published 2023-12-12 · Partial fix · 4.2.0-6 CWE-1021
Priority LOW 24
A flaw was found in Stackrox, where it is vulnerable to Cross-site scripting (XSS) if the script code is included in a small subset of table cells.
CVSS 3.1 MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00288 · Published 2025-05-27 · Partial fix · 4.4.8, 4.5.6 +1 CWE-79
Open these records in search → All records by CVSS severity
792 2681 3429 509 2
THREATIST.IORead the docs