[{"CVE":"CVE-2020-16845","severity":"moderate","public_date":"2020-08-06T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:4214","RHSA-2020:4201"],"bugzilla":"1867099","bugzilla_description":"CVE-2020-16845 golang: ReadUvarint and ReadVarint can read an unlimited number of bytes from invalid inputs","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-835","affected_packages":["container-native-virtualization/kubevirt-ssp-operator:v2.4.2-2","container-native-virtualization/virt-api:v2.4.2-1","go-toolset-1.13-golang-0:1.13.15-3.el7","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-16845.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"7.5"},{"CVE":"CVE-2020-24553","severity":"moderate","public_date":"2020-08-01T00:00:00Z","advisories":[],"bugzilla":"1874857","bugzilla_description":"CVE-2020-24553 golang: default Content-Type setting in net/http/cgi and net/http/fcgi could cause XSS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-79","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-24553.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","cvss3_score":"6.1"},{"CVE":"CVE-2020-15586","severity":"moderate","public_date":"2020-07-14T00:00:00Z","advisories":["RHSA-2020:3665","RHSA-2020:4214","RHSA-2020:4201"],"bugzilla":"1856953","bugzilla_description":"CVE-2020-15586 golang: data race in certain net/http servers including ReverseProxy can lead to DoS","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-362","affected_packages":["container-native-virtualization/kubevirt-ssp-operator:v2.4.2-2","container-native-virtualization/virt-api:v2.4.2-1","go-toolset-1.13-golang-0:1.13.15-3.el7","go-toolset:rhel8-8020020200817154239.02f7cb7a"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2020-15586.json","cvss3_scoring_vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H","cvss3_score":"5.9"},{"CVE":"CVE-2019-13313","severity":"low","public_date":"2019-07-05T00:00:00Z","advisories":["RHSA-2019:3387","RHSA-2020:1051"],"bugzilla":"1727766","bugzilla_description":"CVE-2019-13313 Libosinfo: osinfo-install-script option leaks password via command line argument","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-214->CWE-200","affected_packages":["libosinfo-0:1.1.0-5.el7","libosinfo-0:1.5.0-3.el8"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-13313.json","cvss3_scoring_vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N","cvss3_score":"2.8"},{"CVE":"CVE-2016-9181","severity":"low","public_date":"2016-09-27T00:00:00Z","advisories":[],"bugzilla":"1379556","bugzilla_description":"CVE-2016-9181 perl-Image-Info: XXE in SVG files","cvss_score":5.8,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:P/I:N/A:P","CWE":"CWE-611","affected_packages":[],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2016-9181.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L","cvss3_score":"7.1"},{"CVE":"CVE-2006-4810","severity":"moderate","public_date":"2006-11-08T00:00:00Z","advisories":["RHSA-2006:0727"],"bugzilla":"1618203","bugzilla_description":"CVE-2006-4810 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["texinfo-0:4.5-3.el3.1","texinfo-0:4.7-5.el4.2","texinfo-0:4.0b-3.el2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2006-4810.json"},{"CVE":"CVE-2005-3011","severity":"low","public_date":"2000-02-09T00:00:00Z","advisories":["RHSA-2006:0727"],"bugzilla":"1617775","bugzilla_description":"CVE-2005-3011 security flaw","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["texinfo-0:4.5-3.el3.1","texinfo-0:4.7-5.el4.2","texinfo-0:4.0b-3.el2.1"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2005-3011.json"}]