[{"CVE":"CVE-2019-11023","severity":"low","public_date":"2019-04-09T00:00:00Z","advisories":[],"bugzilla":"1699848","bugzilla_description":"CVE-2019-11023 graphviz: null pointer dereference in function agroot() in cgraph\\obj.c","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-11023.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2019-9904","severity":"low","public_date":"2019-03-16T00:00:00Z","advisories":[],"bugzilla":"1691717","bugzilla_description":"CVE-2019-9904 graphviz: recursive function call in agclose in lib\\cgraph\\graph.c causing stack consumption","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-400","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-9904.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","cvss3_score":"2.9"},{"CVE":"CVE-2018-10196","severity":"low","public_date":"2018-04-18T00:00:00Z","advisories":[],"bugzilla":"1579254","bugzilla_description":"CVE-2018-10196 graphviz: NULL pointer dereference in rebuild_vlis","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-476","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10196.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L","cvss3_score":"3.3"},{"CVE":"CVE-2016-6161","severity":"moderate","public_date":"2016-05-08T00:00:00Z","advisories":[],"bugzilla":"1353550","bugzilla_description":"CVE-2016-6161 gd: Global out-of-bounds read when encoding gif from malformed gd2 input","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","CWE":"CWE-20->CWE-125","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-6161.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N","cvss3_score":"5.9"},{"CVE":"CVE-2014-9157","severity":"low","public_date":"2014-11-25T00:00:00Z","advisories":[],"bugzilla":"1167866","bugzilla_description":"CVE-2014-9157 graphviz: format string vulnerability in yyerror()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-134","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-9157.json"},{"CVE":"CVE-2014-1235","severity":"low","public_date":"2014-01-08T00:00:00Z","advisories":[],"bugzilla":"1050871","bugzilla_description":"CVE-2014-1235 graphviz: buffer overflow in yyerror() due to improper fix for CVE-2014-0978","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1235.json"},{"CVE":"CVE-2014-1236","severity":"low","public_date":"2014-01-08T00:00:00Z","advisories":[],"bugzilla":"1050872","bugzilla_description":"CVE-2014-1236 graphviz: stack-based buffer overflow in chkNum()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-1236.json"},{"CVE":"CVE-2014-0978","severity":"low","public_date":"2014-01-06T00:00:00Z","advisories":[],"bugzilla":"1049165","bugzilla_description":"CVE-2014-0978 graphviz: stack-based buffer overflow in yyerror()","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:N/A:P","CWE":"CWE-121","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2014-0978.json"}]